> I think if someone wrote the GDPR is a net negative, that's actually a good sign in that it implies some actual consideration and weighing up of the advantages and disadvantages.

Then you're much more of an optimist than me. In most cases, I ask them why (to see if there's valid criticism I'm not aware of), and invariably I get back a mix of reactionary "government bad" or supercapitalist "my company shouldn't have to care about people!"

I still haven't heard a good argument for why it's a net negative (though there's certainly good criticism of some aspects, but I still think it's a net positive by far).