AI has exposed the cracks GDPR was already trying to fix