GDPR, privacy and cyber security