Starting with Legal Compliance toward Data Privacy: The Many Hats of a Designated Agent