A readiness assessment tool for GDPR compliance certification · Study