Operational privacy governance under GDPR Regulatory Compliance Operational privacy governance under GDPR