This made me chortle on Facebook earlier...
"Do you know a good GDPR consultant?"
"Yes"
"Can I have his email address?"
"No"
I read a tweet today that one company had sent an opt-in email but also cc'd every single recipient in error........ Epic fail.