The author leads a research group and is coordinator for data protection at Fraunhofer SIT, Darmstadt. For correspondence annika.selzer@sit.fraunhofer.de. This research work has been funded by the German Federal Ministry of Education and Research and the Hessian Ministry of Higher Education, Research, Science and the Arts within their joint support of the National Research Center for Applied Cybersecurity ATHENE.