Your web application must comply with the requirements of the European Union's General Data Protection Regulation (GDPR). You are responsible for the technical architecture of your web application. What should you do?

A. Ensure that your web application only uses native features and services of Google Cloud Platform, because Google already has various certifications and provides "pass-on" compliance when you use native features. B. Enable the relevant GDPR compliance setting within the GCPConsole for each of the services in use within your application. C. Ensure that Cloud Security Scanner is part of your test planning strategy in order to pick up any compliance gaps. D. Define a design for the security of data in your web application that meets GDPR requirements.