GDPR One-Year In: The UK Experience