Navigating GDPR Compliance for Research