After years of speculation and two years of stark warnings, it’s finally here. Enforcement of the EU’s General Data Privacy Regulation (GDPR) is in effect, but according to a report from the Ponemon Institute released last month, nearly half (48%) of organisations didn’t expect to hit the May 25th deadline, or didn’t know when they would.