On GDPR anniversary, French privacy watchdog says penalties are looming