You do know that GDPR is not the first regulation that has ever been written correct? There is a huge body of economic literature already dedicated to the subject.
And you do know that not all regulations are the same?
You are making it sound like some kind of universal consensus on the validity of regulations exists, but such a consensus does not exist because it's a way too complex, and wide, topic to be making blanket statements about.