Unlike the upload filter it's actually good for regular people (though not so much for certain corporations).
It is bad for people. It allows them to keep using bad, centralized, censoring, services without acknowledging the problems that causes. It prevents alternatives from springing up both indirectly because they can continue to make bad choices without consequence, and directly because the heavy new regulatory load makes start-ups harder and gives giant corps (and their giant legal teams) an advantage.
Additionally, you imply that regular people are not impacted. People are businesses. They don't stop being regular people when they run a business.
It's actually served me to know why some company I've never heard about has my personal data on file. It's empowered me to ask them what they have on me, and to tell them to fuck off with it if I don't like it.
GDPR is fucking amazing and as a business owner impacted by GDPR, I am proud to comply with it. Just as many people are proud to pay their taxes because of what is done with them.
Edit: Depressing to see people are downvoting real world experience in favour of FUD.
You also do realize that not everyone has options? That sometimes you don't have a choice if you want to achieve something, there's no alternative?
And what kind of logic is this? Should we get rid of health&safety regulations since people would just not go to the pizzerias where employees don't wash their hands after wiping their arses? And where did these "threats of violence" come from?
You also do realize that life's not an equal playing field and everyone is not equal in all aspects? I can't fix my car without paying someone to do it. Some people can't use the web properly. It's a tradeoff.
It's straightforward logic. You don't need to use Facebook. They have no obligation to provide you service. Even if you do use it there's no threat to your health or wellbeing (unlike bad food preparation hygine).
The threats of violence are from the government. If you don't pay their fines, say, if you refuse to be a slave and be forced into providing services to people on terms set by others, they will come at you with violence.
Anyone who thinks the GDPR is only costly to companies that were misusing data hasn't had much contact with the GDPR in the context of a business that's not absurdly simple (and most businesses aren't absurdly simple).
It didn't take long. Couple weeks of work. I did them myself.
Compliance documentation is what's needed: https://twitter.com/Adys/status/1014612906359615490
Edit: Depressing to see people are downvoting real world experience in favour of FUD.
GDPR is bad. See what I did?