Column DCSP #4: the GDPR lottery