Organizations Struggle to Comply with GDPR