But shouldn't non-European companies that have EU customers have to comply with GDPR too?