I am biased of course as I work on various aspects of GDPR compliance, data retention and deletion, encryption compliance, etc. I used to think this stuff was really boring compared to high scalability, graphics, schedulers etc. (all of which I have worked on in past lives); lately I think it is both interesting and crucially important hence my comment.