General Data Protection Regulation: Positive outcomes after two years of application