an expert on data privacy who works independently to ensure that an entity is adhering to the policies and procedures set forth in the GDPR