How the general data protection regulation changes the rules for scientific research