How to handle the flood of GDPR privacy updates