Exactly, the GDPR regulations are completely reasonable and it's actually quite odd to see them being put into practice so late. The user data selling wild west had to be regulated at some point to curb predatory practices of Google, Facebook, and many others. If your business model isn't based on exploitation and profiling, it isn't hard at all to comply with GDPR.