Two years after the implementation of the GDPR, many companies are still not complying with the protection of personal data rules. The regulatory framework has taught us a lesson in data quality and data governance that companies can no longer ignore.