COVID-19: Putting the General Data Protection Regulation to the Test · Study