Wrt to vagueness i have to respectfully disagree. Perhaps an opinion poll would help, but from what i 've gathered from Q&A forums that are frequented by europeans in the past weeks, it's freaking vaguety vague. to the point where it's not clear how broad it is at times.

Maybe it reads fine if you are a "data subject" (i hate this term btw) , but if you actually need to comply its hard, even for the simple stuff that every website has. E.g. cookies, advertising, backups

I 'm not even sure if the data subject can figure out what to expect from GDPR. E.g. Is HN compliant? Can you tell if a website you visited today is compliant?