Joint Civil Society Letter to the European Commission on the enforcement of the GDPR