There are many unresolved questions in GDPR. For example: How should data records be kept? An Excel spreadsheet is not the right tool for the job. A graph database is.