Earlier quoted context omitted.
I'm often critical of GDPR, but stuff like this is why I think it's probably necessary to have.
GDPR is 100% necessary and fundamentally a good idea. It has a lot of problems that just show how incompetent politicians can get on a bad day, but that doesn't invalidate the core idea.
Mind elaborating on them?
The only potential issue, which I see, is some ambigiouty. However, I don't see how you could craft a legal frame work without some ambiguity, which needs to be resolved by the courts at one point.
Unless your business model is dreck, I really don't see any issues with the GDPR as such.