FaceUp, a large social network based in the United States but with millions of customers in Europe, is considering how best to comply with the EU's GDPR. Assume that FaceUp currently harvests a large amount of personal information from its users, and sellsaccess to that information to third parties to generate marketing revenue. You are FaceUp's CISO, and the Board is asking for your input. Describe at least five changes that FaceUp should consider inits operations, andstate your opinion as to whether or not these changes should be made globally, or just for its EU customers.