New study highlights lack of GDPR preparedness (International Association of Privacy Professionals)