One thing I noticed (and I've worked with several companies to make them compliant) is that many non-tech companies finally see data as something to pay attenti

One thing I noticed (and I've worked with several companies to make them compliant) is that many non-tech companies finally see data as something to pay attention to. GDPR forces them to know what data they collect and store, enabling other initiatives. Those can be to finally improve data quality (as you'd otherwise have to expose invalid data to clients), better customer service (self-service) and data analytics. I'd say, for the companies I've met the cost they had with GDPR had a pretty good ROI even if there was no enforcement of GDPR. Not all companies see it that way, though.