One year in, GDPR fines haven’t hit publishers — or very many other companies, actually