GDPR A sign of things to come for non-EU merchants