Google’s GDPR consent plan could be a template for other tech giants