Are requirements to deposit data in research repositories compatible with the GDPR