The European Commission's Exemption from GDPR