GDPR second anniversary – Recommendations for efficient enforcement