I'll put my hands up to 99% being hyperbolic. ;-)

I do worry that a lot of GDPR compliance will amount to "box ticking" rather than a genuine improvement in user privacy.

Legislation is a blunt instrument and it's hard to get sizeable real world benefit from a heady mix of noble sentiment and complex statute.