Security, privacy and GDPR FAQ