Getting to grips with the General Data Protection Regulation