Consumers spend more on GDPR compliant companies