GDPR Readiness Applies To U.S. Retailers, Too