https://allianzebpo.com/blog/data-security-questions-gdpr-hipaa-ready-bpo