GDPR ecdev business list

* indicates required