Glad to see the appropriate GDPR noises are being made
It's a good thing that journalists are taking GDPR seriously and making the appropriate noises in the appropriate amounts. I do expect that all the hoopla is necessary and, after May, companies will not be able to say they were not aware of their obligations.
That said, I am not expecting all that great an impact for most companies. Nobody is going to go after a customer/contacts database because if so, then every company in Europe can close shop. So most companies will wait for June, then July to see what happens and, since nothing will, there will be a collective shrug and life will go on.
For some companies, the ones that deal with great amounts of data, there is already a flurry of activity to be sure, but I am not hearing of massive data sets being obliterated to ensure GDPR compliance. From what I hear, it's much more massaging existing data to help it squeeze through the GDPR obligations.
Not that I hear everything, to be sure.
Still, I have the feeling that GDPR will be wielded mostly against companies that have been caught goofing around or getting hacked. Those companies will endure the pain of an investigation which will bring to light bad goings-on and, additionally, GDPR non-compliance and they'll be hit with the fines for that.