You can't do privacy in a spreadsheet

GDPR is an obligation but privacy is an asset.
You can make them two sides of the same coin.