As with any regulation, there are issues which need to be sorted out. But one thing is crystal clear to me: this helps making people aware of what is happening to their data and their lifes. There is no excuse for not being able to come up with a viable business model without productizing users and making them subject to social and political manipulation.
I wonder why no one writes about how products could use GDPR and other regulations to their advantage instead of whining about the demise of the ad industry.