Black Hat: GDPR privacy law exploited to reveal personal data