Many companies know it: In theory, there is a clear rule on how the requirements of the GDPR should be…