https://www.advent-im.co.uk/nis-vs-gdpr-not-siblings-but-cousins-nisr-gdpr/