A year into the implementation of Europe's General Data Protection Regulation (GDPR), we are just beginning to see the effects it has on consumers and firms.