The brands treating GDPR as a cost centre are paying for compliance and getting nothing back. The ones treating it as a trust ...