Written by EDRM GDPR Drafting Team