EU Advocate General Defines “Identity Theft” And Reaffirms GDPR Compensation Threshold