Maybe America should wait a bit to see how it goes before jumping on the bandwagon. There isn't much to gain by adopting these (potentially beneficial) standards sooner rather than later.
There is ample possibility that the unintended consequences of GDPR play out in ways the regulators do not expect. Assuming otherwise is foolish.
As far as I can see the companies targeted will do their upmost to avoid any impact on their bottom line so its quite likely they will discover plenty of holes in the legislation.