SMS: GDPR - how to achieve and maintain compliance