On purpose and by necessity: compliance under the GDPR
blog.acolyer.org