GDPR and the Doorstep Data Protection Policy