Preparing for GDPR compliance is a matter of preparing for privacy in general. David Ross, Baker Tilly principal and privacy practice leader, outlines five steps organizations should consider.