70% of employers are GDPR-ready, but concerns about hiring remain