If GDPR was forced by the EU, why would a Judge put the blame on the domain registrant for putting privacy on a domain name, when the registrant was forced in the GDPR (PRIVACY)?