The fact that it is such a big problem for so many companies just demonstrates how badly things have been handled thus far.

I'm sitting through tons of GDPR meetings & there are quite a few conclusions amounting to "maybe we shouldn't have stored the data that way".