One effort to take a pro-active stand in light of GDPR is the OWN YOUR DATA effort. See: http://www.ownyourdata.xyz/ While we struggle within ICANN for good policy, there are also interesting actions elsewhere. Sam L., (NPOC)