GDPR Compliance and Online Identity Verification