Generating Practices: Investigations into the Double Embedding of GDPR and Data Access Policies