What Does The Gdpr Require By Law