The Importance of Identity to GDPR