https://www.sans.org/reading-room/whitepapers/legal/preparing-compliance-general-data-protection-regulation-gdpr-technology-guide-security-practitioners-37667