GDPR goes live this week. What happens next?