How US Organizations Are Responding to GDPR and the Need for Data Privacy