There is certainly a lot of activity now around GDPR, but are many organisations missing a trick? Could they move forward from looking only at how to comply with legislation to thinking how they can look at the new rules as an opportunity for their brands?