CEO involvement helps boost GDPR preparations