Ensure GDPR compliance for personal data processing in CIA platform with privacy-by-design principles