GDPR is a European regulation but it has a global impact