GDPR - Ten key points we've learnt since 25 May 2018