Why the GDPR impacts every company in every country