Data Protection Regulation Article 66(1)