GDPR: Cutting Through the Noise