Problem
The GDPR is often lauded for its provisions that promote better privacy practices in the private sector. At the same time, the GDPR puts a greater onus on companies to be compliant. What are some of the drawbacks of the GDPR from an industry perspective? Are any aspects of the law overly burdensome or possibly counterproductive? Does the GDPR do a good job of balancing privacy interests with commercial interests? Is there anything that you would change?