In your opinion, what would allow the intentions behind GDPR to be better realized?