Teresa Quintel is Assistant Professor at the European Centre on Privacy and Data Protection (ECPC) at Maastricht University. For correspondence: <t.quintel@maastrichtuniversity.nl>. The author would like to thank Alexander Hanff for his insightful comments.