There was a thriving industry harvesting and processing personal details about people. I think if the true extent of it were known most people would warmly embrace GDPR. But some people have lost a lot of money and they are pissed, but again I kind of feel there is a lot unscrupulousness involved so it's hard to feel sympathy.

To a lesser extent, there are people that are concerned about "all the extra work" this entails, and the cost it adds to their bottom line. But this stuff is important nowadays. You really should be taking care of it.

There is some scaremongering about small firms being blown out of the water for noncompliance, but really, unless you're doing something you shouldn't be doing you should be fine. The terms of GDPR though still not completely clearly specified are flexible and reasonable. The main thing is now, that you can't say you weren't aware of it.