Well, yes, if someone has no idea what's in GDPR they're probably going to be more fearful of all the bullshit being spread about it.

Well the burden of proof lies on the person who makes the claim. otherwise it's an unsubtantiated claim that can be discarded without evidence.

It would certainly be interesting to quantify how much money has been spent just trying to understand it