Most business leaders now have an awareness of GDPR and its requirements. They’re keen to select and implement technologies to aid GDPR compliance. But important foundational capabilities should be addressed before technical controls for data protection are deployed.