Exhuming the GDPR Bodies