Data security is a major issue in GDPR compliance