gdpr hack portfolio