Activity completion and GDPR compliance