Smaller companies have fewer compliance concerns and thus have an easier and cheaper job conforming.

As for the comment about "consolidation of goods/services into larger and larger corporations", that's very much an Americanisation. It's usually the American firms that go for global monopolies. I'm not saying we don't have large multi-nationals in the Europe as well but there is a real culture for supporting independent businesses here which I've not noticed in America (it might exist there but I've not seen it as prevalent there during my visits).

Frankly, the only people GDPR affects is those it's expressly there to protect us from. So I consider that a win.