Businesses and websites, including financial services, are still working to meet the new data protection and privacy related rules set out by the GDPR.