I can recommend everyone to just read the EU website on GDPR: https://ec.europa.eu/info/law/law-topic/data-protection/refo...
they write the official website in understandable language, in plain and simple English, not in weird lawyer talk. They have examples for companies as well. What to do, how to act etc..
Forming your opinion about these laws based on what the big American data companies tell you about it is about the same as asking tobacco companies what they think about health laws.
It really isn't that hard to just take 30 minutes and read the website from the EU. Literally every comment here talking about 'stupid old lawmakers that don't understand the internet' has not even read the bloody document. I've seen Youtube comment sectioned that were better informed than HN about this.