On another note, I'm surprised there hasn't been much in the way of scam e-mails exploiting this GDPR thing.... i.e. asking you to click on links to confirm that you wish to stay in contact.

I've been very careful about clicking on the links to "opt in" in view of this risk and have tried to make sure the organisation was genuine.