Operational privacy governance under GDPR Operational GRCRegulatory Governance Operational privacy governance under GDPR