How the General Data Protection Regulation affects South African data