With less than a year to go, we review the legal and commercial realities of GDPR, the cost of non-compliance and the actions that businesses of all sizes must take now.