Majority of firms say they are unprepared for the effects of GDPR, but also need to up cybersecurity protection, CenturyLink study finds.