[ALAC] What to cover re GDPR in the HIT sessions?