data protection, Data Protection Impact Assessment, European General Data Protection Regulation, small businesses.