CMR commitment to GDPR