[Macha]

And is what the GDPR is trying to establish as the legal baseline, though things are moving slowly (this article is showing they _are_ moving though)