Not one. At least not privacy-preserving. It may be an opportunity for European companies to take over in some narrow segments but that would be due to ordinary protectionism.
The GDPR is not really a law in the conventional sense. It's better understood as a political maneuver. I've been researching it lately as it may affect the company I work for (which has a presence in the EU, well UK, but EU for now).
First problem - the GDPR is so vague that it's impossible to know what it really says, what it bans and what it allows. With just months to go before enforcement begins there are still 50/50 splits amongst legal professionals about basic things like how it affects backup strategies. For instance if someone invokes their "right to be forgotten", do you have to restore and rewrite all backup tapes? Or can you filter out their data at restore time? If not then what if you start getting a constant stream of forget-me requests - do your backups have to be now constantly rewritten and if so, are they still really backups? What about if someone emails you from Europe. You now hold their "personal data", so what if they ask you to delete it? Do you have to erase not just their email but any email that quotes or forwards that email? If so, how exactly can you do that given that no email software supports such a feature? What if you're hosting email and someone emails one of your users, then demands to be forgotten - do you erase their email right out of your users inbox? These are just a few obvious questions of hundreds.
Second problem - the new regulator being set up does not issue binding decisions except in case of cross-border disputes. If you want clarification you're meant to ask local data protection agencies, or the new regulator, but the answers you get back might be wrong, or too vague to be useful, and there's nothing you can do.
Third problem - the potential fines are so vast they could instantly bankrupt most companies. So not only is there a law you can't ever be sure you're in compliance with, because it's so badly written, but if the EU decides you are in violation, that can be the end of your firm.
The cynic in me looks at this terrible low quality law and frankly doesn't see a law at all. He sees a political project - namely a clever way to sidestep the EU treaty's ban on the EU levying a corporation tax. With increasing euroscepticism across the continent the chance of the EU being given direct tax raising powers is now very low, but the EU is stuffed with true believers who want to turn it into a new country ("Europe") that replaces the existing countries. To become the new de-facto government of Europe the EU must be able to fund itself and not rely on member states or their pesky votes .... being able to fund itself by "fining" i.e. taxing foreign tech firms for endless violations of a law they cannot ever hope to understand is an ideal way to do this.