In the Unified User Interface, users can currently select ANY view, not just the views restricted as per the customisations. This means that users in the traditional experience are limited (expected results) but in the Unified Interface are able to select any view, and therefore any record (incorrect results). This has some potential GDPR impact as it could allow users to select records from a "not allowed" view.