Understanding GDPR from Security Professional’s Perspective