GDPR: Best Practice for Data Protection in the Information Age