Open banking and GDPR: Regulatory burden or chance to innovate?