GDPR and Data Protection surgeries