I don't think GDPR is flawless, but at some point if we don't do anything, privacy violations are going to become so common place and so entrenched in the online economy that we can't fix it anymore.

At that point, the discussion would be all about all the "jobs we would destroy" and "businesses opportunities we would shut down!", and heavy lobbying would make sure it gets nowhere.