GDPR: Tech firms struggle with EU's new privacy rules