I could become a “Canary Clause”: you know a jurisdiction doesn’t abuse privacy or doesn’t deploy warrantless ubiquitous surveillance until the GDPR compliance clause disappears