GDPR compliance isn't one big project - it's a handful of small, ongoing habits. A practical, jargon-free checklist for small business owners.