“According to Sridhar Ramaswamy, an unintended negative consequence of GDPR is that it raised the cost of doing business for European companies and ultimately benefited large incumbents who could afford compliance over new startups.”