Is the GDPR a Good Thing for Small Business?