As long as you are looking into GDPR and how it affects your business you can evolve it over time rather than completely change everything by the 25th.