Have recent issues with DeepSeek and GDPR compliance pointed a spot light on OpenAIs policies for EU data security?