Forcing companies to tell users what they're doing with their data so the users can have informed choice isn't really my issue here.

The issue I have is the rules in what can be done with that data. Because those rules make it so that the users don't get to decide what they're OK with being done with their data.

If I'm being really honest here, the GDPR seemed pretty well intentioned, IMHO it just went a little far.