I gave a quick thought on GDPR over on the State of Security Tripwire blog:

Whilst it’s early days still for GDPR and it’s enforcement, I’m hopeful this will bring about a positive change in the years to come (perhaps more than any other mere technological change)

I wonder if GDPR will really make a difference we can discern in 5 years time! Read the full post over on https://www.tripwire.com/state-of-security/gdpr-meltdown-memorable-infosec-2018-part-1