GDPR is going to really throw a spanner in the works, too.