The implementation of GDPR and its potential impact on local businesses