Data Protection Commission reflects on the first year of the GDPR | data protection