Companies must be able to show GDPR compliance by May 25, 2018.