“An unintended negative consequence of GDPR is that it raised the cost of doing business for European companies and ultimately benefited large incumbents who could afford compliance over new startups.”