Implementing The Privacy Rule In Gdpr