Time is running out for organisations to put plans in place to comply with the significant European data protection law next May, warns the Data Protection Commissioner’s office, writes Pádraig Hoare.