Data privacy in the housing sector – unlocking GDPR