Of those surveyed, most companies feel they are on track to meet the requirements of GDPR. But for those who aren't, what could be the impact for their businesses?