4 Questions US Nonprofits Need to Ask About GDPR