Does GDPR really work?