How to Turn the EU GDPR into a Business Asset