Is GDPR Compliance Tougher Than HIPAA Compliance?