GDPR: What’s happened in the last year