1. Institute for Information Law, University of Amsterdam, Amsterdam, the Netherlands
2. Amsterdam School of Communication Research, University of Amsterdam, Amsterdam, the Netherlands
3. Interdisciplinary Hub for Security, Privacy, and Data Governance (iHub) and Institute for Computing and Information Sciences (iCIS), Radboud University Nijmegen, Nijmegen, the Netherlands