GDPR comes into effect today: how we are protecting personal data