The EU General Data Protection Regulation (GDPR) a commentary · Study