3B: GDPR across a MAT