#64 GDPR, anonymization, digital backups, and ostrich glasses

How far do you have to go to ensure GDPR compliance for existing data?