I'm probably a bit more in touch with this stuff than most because of the nature of my business but in the last year or so I've seen more and more companies that made real work of their GDPR impact studies (companies with vast amounts of data and/or sensitive data were further along). For all but the largest the impact has been very low, the longer ago they started the lower the amount of work they had to do.

That's the price of sitting in your office with your head down though, you can't ignore changes such as these.

This is one of the oldest HN mentions about the GDPR I could find:

https://news.ycombinator.com/item?id=11764073

But it sank without a trace.