Europe’s new privacy rules: 1 month in, 7 takeaways