85% of SMEs understand GDPR but legal requirements are still