The GDPR is now one year old. However, for consumers and companies it has a limited effect on transparency.