IAM Analyst GDPR compliance