Still worried about GDPR? Expert provides advice