https://pii.ai/sensitive-data/how-the-gdpr-affects-non-eu-companies