Comment by CobrastanJorji

I mostly agree with you, but the penalties for non-compliance are so staggeringly large, the requirements are so vague, and the EU's love of fining American tech companies is so great that Id' be awfully nervous about GDPR if I were a large American tech company.