Wait, why is the metric we're using to judge legislation whether it's "against industry" and "for the people"? This sort of viewpoint will just reinforce American stereotypes that all of Europe is some French-style capitalist hating blob. Industry is people! GDPR hurts the most for small firms created and run by people who already spent years slaving away at large corporations and decided to strike out on their own, only to be squashed by huge compliance costs that Google can pay but they cannot.

Also, this whole "GDPR has good intentions therefore it's good" idea that is cropping up on this thread is very problematic. We don't judge laws by their intentions but by their outcomes.