Building the bulwark: preparing your firm for data protection regulations