The data protection role (DPO) under the GDPR | IT Governance USA