Regardless of whether you think this is old research rebranded or not; the headline is that the lack of understanding of GDPR and the responsibilities that companies have regarding data protection has been exposed by James' efforts and may help address that concern. A lot more companies know about GDPR than were probably aware of DPA98 and they have also read the scare stories associated with none-compliance... I'd say his research helps and isn't wasted effort.