Mind the GDPR (Pt. 2)