“The GDPR and the protection of the data subject between public and private enforcement in the case of cross-border processing” (2023) CUADERNOS DE DERECHO TRANSNACIONAL, 15(2), pp. 898–919. doi:10.20318/cdt.2023.8083.