Encryption and the GDPR