If you are the kind of person willing to spend a year or two doing mind-numbingly boring work in order to become obscenely wealthy, I suggest dropping everything and focusing on being a GDPR expert consultant for the coming two years...
... in the coming months, businesses all over the world will become aware that this GDPR is a project they should have initiated two years ago that carries absolutely astronomical fines if not implemented, and for most systems its tens of thousands of consulting hours ...
... to comply, because almost no systems have been built with much concern for user privacy or right to be forgotten, and untangling it at a core data level is ludicrous amounts of work ...
For example, did you know that usernames are personally identifiable info - you need to be able to eradicated them. Imagine a system where it's used as part of the key, or the url. For example, imagine a forum allowing links to user profiles for example...
... I currently see big institutions assigning GDPR as a minor task to some poor unsuspecting project manager, that accepts it not knowing that it's legal+software spider web with fines large enough (2% of global revenue) to literally kill the company...
... GDPR - it's a big, boring, exhausting goldmine.
