Scrutinizing the EU General Data Protection Regulation · Study