Thanks to GDPR, the chief data protection officer is a new key role at publishers