Brokers unaware GDPR changes