GDPR is a HUGE pain in the ass for businesses (I should know), but it does offer better theoretical consumer protection with regards to their data.
That being said, I see GDPR no more than a trojan horse: the EU shows their people that "Hey, we care about you and our digital laws are good for you". People see that GDPR is inherently beningn, so in the future they won't scrutinize internet legislation as much, and just assume it isn't bad, because GDPR wasn't bad.