A quick online search of “GDPR news” reveals that, more than 100 days following the May 25 enforcement date of the General Data Protection Regulation (GDPR), new data privacy rules are having some far-reaching (if unexpected) consequences. From shareholders suing their own corporations over preparedness missteps and battles over the right to be forgotten, to medical tests being cancelled at the eleventh hour and restrictions around access to certain pieces of online content, organizations and consumers alike are adjusting to post-GDPR life.