The Importance of a Data Protection Work Plan