Reopening the GDPR is a threat to rights, accountability, and the future of EU digital policy