Report: GDPR regulators digging into data brokers