(ISC)² EMEA Reacts: Yahoo – a case study for GDPR?