A small example of GDPR stupidity:
We store customer's DOB. When they reach 64 we automatically put them on a Priority Services Register (so they get an engineer faster when they have a power cut)
So the customer calls us about their account, and we have to spend 5 minutes explaining what the register is and getting their permission to be on it before we can do anything else on their account.
As you might imagine the poor OAPs get terribly confused about what is happening ... :/