gdpr compliance ai arbitration