GDPR compliance toolkit: DPIAs, records of processing, privacy policy review, breach response and data subject requests