The implementation of the General Data Protection Regulation two years after its application | GovLens