"GDPR: An EU Framework for Managing Privacy and Data Security Risk," Wilson Center, Washington, D.C.