General Data Protection Law and information security in healthcare