Part of the goal of the GDPR is to turn massive stores of user data from a corporate asset into a legal liability. If we can get internet companies to treat user data the way brick-and-mortar companies treat hazardous chemicals--occasionally necessary for some industrial process, but best avoided where possible, and always treated with respect--then that would be a big win for society IMO.