The GDPR provides new data protection guidelines with strict fines for non-compliance, but it's an opportunity to create a culture of privacy.