The real punch of the GDPR will hit those that did not obtain consent and that end up being compromised losing data they shouldn't have had in the first place. That's a chair you really do not want to be sitting on when TSHTF.

I sincerely hope the fines will put a couple of companies out of business as a warning to the remainder.