5 Surprising Tactics That Are GDPR-Safe