GDPR Not Fully Complied with