EU working on a new General Data Protection Regulation Act that may affect the use of personal data in research