As more public sector services go online and government seeks to join up datasets to improve efficiency and citizen experience, is GDPR actually going to improve data security in the public sector, or is its design too private sector centric?