Honestly, I think GDPR was way better than I feared. They fined literally no one and we all got access to our data. It created a great interoperability situation. I am quite happy with it because they essentially do not enforce but everyone abides by it.
Nice! I was entirely wrong about what I thought would happen. If I were starting up I'd probably ignore building the entire framework to start with and deal with it when I have to.