[guitarbill]

> while the real "bad guys" that are actually doing bad things with our data are going to continue ignoring the law.

This is already happening without the GDPR (carders, dumps, etc), so I don't buy it. The black-market analogy (e.g. illegal drugs) also doesn't hold when applied to companies.

> the hilariously large fines (regardless of company size, even)

Oh no, proportional fines! How socialist!

The whole point is to make it somewhat independent of the company size, so bigger companies won't just swallow the fines. This is typically what Google et al do, they just factor it in to the cost of business. The GDPR wasn't written in a vacuum.

[drusepth]

>The whole point is to make it somewhat independent of the company size, so bigger companies won't just swallow the fines.

Ironically, it's the bigger companies that can still just swallow the fines and the little companies that just effectively vanish into bankruptcy.