I work at an ISP.

GDPR is huge and #1 on just about every priority list. Accounting for every single piece of (even theoretically) personally identifiable information, access restrictions to said data, storage time limits, logging of access and changes (without logging anything sensitive) and everything else is a gigantic undertaking.

Every single system we have that stores or even just caches data is affected by this, and it's tying up a large amount of our resources.

As a consumer I certainly welcome the GDPR, but as someone who works in IT, holy shit our workloads have increased.