Before tossing GDPR onto the bonfire, perhaps the EU should first look at DORA.