what is the impact of the gdpr to american businesses