Panel: Learnings from companies addressing GDPR