6 months post-GDPR - how has the industry changed?