On purpose and by necessity: compliance under the GDPR | Hacker News Reader