via @jedisct1
via @jpmens
via https://www.theregister.co.uk/2018/04/24/ietf_gdpr_compliance_advice/