IoF publishes updated GDPR guidance as first anniversary approaches