Could an AI ethics audit end up like GDPR?