How does compliance with the General Data Protection Regulation that came into force on May 25, 2018 affect English law firms in their capacity as data controllers?