Forrester Interview Question

How would I advise a CISO on GDPR