GDPR regulators crack down on data processing as companies struggle with privacy compliance