GPSR risk assessment