Why Visibility is Key to GDPR