M. E. Gonçalves, "The risk-based approach under the new EU data protection regulation: a critical perspective", in Journal of Risk Research, pp. 1-14, 2019