The GDPR, One Year In