SA companies must take heed of GDPR