The GDPR beyond Privacy: Data-Driven Challenges for Social Scientists, Legislators and Policy-Makers