GDPR: Short-term pain, long-term gain