The GDPR and cybersecurity