Mind the GDPR (Pt. 4)