GDPR: A few days left, but a long way to go