So what I think is - when the antagonism ends up taking big chunks of money everyone will suddenly realize "oh shit, it's not bottomless" at which point there will opportunities to take advantage of.
But maybe my take is too reasonable and instead the advertisers will think oh damn, stuff is really messed up better stay the course with these big guys to get us through these troubled times!
Even if smaller players take all super duper steps to protect user data, advertisers have no real way of knowing if they are in fact compliant whereas they have a simple way of looking at the published balance sheets of the big players and seeing the huge cash pile and armies of lawyers. The scare caused by activists weilding "nightmare letters" doesn't help. Also there's a body of thought in legal circles that even vendor chains needs to be evaluated which is causing advertisers to be wary. Far simpler to just throw money at the biggies who will deal with this.
As usual, the smart money will be in the certification industry that will inevitably come up to tax the mid sized players while the small publishers will die out.
Remember the adage “divide and conquer”? If you want to destroy something, consolidating its power base (like GDPR does to advertising in Europe) is a poor first move.
The GDPR doesn't only apply to advertising companies. When you're offering services in exchange for money you still have your customers' names, IP addresses etc. Even if you aren't using any of that information for advertising or data mining, you still have it, which means you still have the compliance cost. A lot of that cost is not proportional to how much data you have or what you do with it.
And that's the problem. The GDPR will never destroy Google or Facebook, but it can destroy a three person startup that has nothing to do with advertising and might have offered an ad-free alternative to some of their services.
If destroying the ad industry is the goal, why not just tax advertising at >90%?
And if you don't profit from a website and just want to place advertisements to keep the lights on, you don't have that kind of money.
Now, seriously, there are so many other problems here and GDPR compliance is so easy when you've already paid attention to security of your service, that it really does not make sense to blame a good law. Losers who cannot comply just don't deserve to be on the market.
The story with copyright directive is completely different and has no connection to GDPR.