https://www.systemtek.co.uk/2018/10/gdpr-three-months-in/