Big business massively lobbied against the GDPR. One big reason it ended up so strict is because the final negotiations happened to coincide with the Snowden revelations, giving cover for politicians to resist the lobbying.