UNDERSTANDING GDPR COMPLIANCE: A ROADMAP FOR IT PROFESSIONALS