Why GDPR Made This Personal