Making sense of the GDPR & Artificial Intelligence paradox