General Data Protection Regulation – Red lines for consumers