Asked a client how they were getting on with the GDPR preparations, knowing they sometimes ask me to check documentation and such.

them: "Whats the GDPR"

me: "its the new European privacy law coming near the end of May, its ok, most of the work should be covered by your PCI DSS compliance paperwork with a few tweaks."

them: "oh, we just pay the non-compliance fee for that"

me: "wait what? well whose your data controller registered under the ICO required due to cctv being used"

them: "oh isnt that optional?"

me: "ok so heres my hourly, or i can quote for the whole compliance project"

I know not everyone is tech minded and GDPR hasnt been that well advertised, but jeez...