GDPR and the Legal Sector