The truth about GDPR and the insights industry