Are we there yet? Understanding the challenges faced in complying with the General Data Protection Regulation (GDPR).