Bridging the gap between technology and policy in GDPR compliance: the role of differential privacy