That is naive. The GDPR is structured to require processes that favor implementation by the management structures already in place in big businesses, leaving the little people scrambling. Being good for the consumer is just a cover story.