The European Commission is set to review the GDPR