A thirst for GDPR