GDPR compliance and cyber security