GDPR Lawyer urges firms to consider cyber security implications with every key business decision