Are gdpr issues included in the privacy