Privacy, Security and Data Protection in Smart Cities: A Critical EU Law Perspective