Deepfake fraud is up 58% and a synthetic identity now takes 27 seconds to create. Here is the GDPR reality, the Article 9 angle, and a four-point defence plan.