Why businesses should stop complaining about GDPR compliance