Despite the GDPR (General Data Protection Regulation) coming into effect on 25th May 2018, many businesses are still not yet compliant.