For GDPR compliance for employee records, the killer application (as Uber and others are finding) is performance management, which would not seem to be a priority for HR business leaders. This will be aggravated by the need to monitor gifts and other activities that may cause a conflicts of interest. We can also note that of the drivers for change, compliance is seen as the least important.
Monitoring