GDPR-Compliant AI: A Checklist for European Enterprises