https://data-privacy.io/gdpr-ccpa-10-steps-to-designing-the-right-data-protection-program/