GDPR in the EEA – Greater Harmony or Increased Permitted Divergence?