Companies Lagging in GDPR Compliance, Survey Finds