Who they are, what they do and their role in modern data protection compliance