GDPR SUPPLIER DISCLOSURE