GDPR - monitoring contact's permissions