Lexing Insights #21 – GDPR: DPAS’ Decisional practice