Critical Building Blocks for GDPR Compliance