R, R & R: roles, responsibilities and risk from the GDPR to the AI Act. - privacy4marketers