What the future looks like as GDPR's one-year anniversary approaches