Lots of discussion about the GDPR and the ramifications it has for search firms in Europe - but this story from Hong Kong reminds us that search firms around the world can face consequences if they don't protect candidate data.