not in GDPR string: ox