This is the case with most organisations. You have a finite amount of resources and attention, therefore you need to prioritise.

Most GDPR chatter started picking up only in the last few months (of course big orgs have been preparing for the May deadline for a while already).

Downvoted, deadline hasn't passed. No reason to stress about it