EU Commission about to wreck core principles of the GDPR