Is the General Data Protection Regulation the Solution?