What steps would you take to ensure that all student data is compliant with GDPR regulations?

Situational