Dyann outlines where she believes a company needs to start in its journey towards compliance with the GDPR.