I know about EVB-IT and GDPR. And it is actually slowing down a lot. While each of these things can be managed the combination is a productive killer. You will understand this if you ever worked as a it-project manager in the German goverment. There is a representative for everything and he is just doing his part and blocking everything not in his work field. It is not something like GDPR alone but the combination and the handling of these aspects. And law aspects always get the highest proirority.