Comment by JumpCrisscross

> How is GDPR badly written?

Enforcement is fractured. It’s a mandatory-complaint driven model, which is both intensive (every complaint demands manpower on both the regulator and regulated’s sides) and prone to abuse (known tactic for quashing European competition: herding complaints). All that means it’s ambiguously burdensome, which means there is a fixed cost to compliance even if you aren’t doing anything wrong.