Legislative Compliance Assessment: Framework, Model and GDPR Instantiation