Dealing with privacy risk: solutions to data sharing under the GDPR for data controllers