The author is a PhD candidate at the University of Luxembourg, where she is pursuing a PhD on enforcement and accountability challenges in the composite system of GDPR enforcement under the supervision of Prof. Herwig Hofmann and with the support of the Luxembourg National Research Fund (FNR) (PRIDE17/12251371). For correspondence <Lisette.mustert@uni.lu>.