Draft: EU General Data Protection Regulation Compliance Policy