I can see how reworking an existing system to be GDPR compliant can be a major headache. But for anything designed from the ground up the rules are really easy to follow and quite sensible.