Fact or fiction? The most far-fetched GDPR myths