IMPLEMENTING DATA SECURITY MEASURES: GDPR REQUIREMENTS IN THE UAE