GDPR: Brace for Impact or Not?