The GDPR is just the the first ripples of a tsunami of change. If we as data professionals want to be ahead of the wave, and not be swamped by it, we need to begin to change our attitude towards data. It doesn't belong to our companies: it belongs to the people or companies that generated it. Business models built on mining such data: FB, Google, and others: are going to have to adapt, or they will be regulated to death. Remember Ma Bell? There's no company so big that the government can't chop it into pieces. Adapt or die.