EU Data Privacy: What US Orgs Need to Do Now to Prepare for GDPR