The protection of health data in compliance with the GDPR