You're going to be searching for a long time to find a piece of legislation that only has good parts in it. The GDPR is overwhelmingly positive, and a massive step towards ensuring privacy online.

In my opinion, it has been pretty overwhelmingly a net positive, whereas article 13 is a clusterfuck that made me come up with a Cloudflare rule to block EU visitors from accessing sites (and yes, that includes myself):

https://twitter.com/Stavros/status/1100799044862033922

If anyone from Cloudflare is reading this, can we get a "redirect" firewall rule so I can point the visitors to something like "you can't access that site because the politicians you voted for are morons"?

I don't need a legislation to only have good parts in it, but I do want it to do more good than bad. GDPR does not do that. The harm it causes for internet businesses in the EU in the long term is going to be too much. It's already making EU companies less competitive[1] and it'll become worse as time goes on.

[1] https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3278912

Yes, all regulation makes companies less competitive than unregulated companies. That's why you regulate everyone.

Whats the harm of the GDPR?

Less competitive companies means that we won't have these types companies in the EU. We are already doing very poorly when it comes to anything related to computer technology and this will make it even worse.

The GDPR is pretty sane and not very hard to comply with, unless you're being scummy. I'd rather not have scummy companies, even if that means we won't be competitive.