Enforcing the GDPR - what lies ahead in 2019?