If you don't think this legislation is onerous, you're not doing the work of implementing it. Now, in my company's case, a big enough chunk of our customers are in the EU that it was the right choice.

Thing is? We changed almost nothing about the way we processed data. Data subjects are no better off because we've spent tens of thousands of dollars complying. Whether people comply or not, the fact of the matter is that this regulation is onerous. It's onerous even if you love the intent of it, and it's onerous even if you think it's worth it.