EU data protection - decoding the matrix