The Court of Justice of the European Union (the “CJEU”) has held that controllers must inform data subjects of the actual identities of...