EU data regulation: how a startup should cope with it?