The only organisation that isn't in bed with them is the EU hence GDPR. So I'm going to sit back and enjoy the show and wait for 25th May at which time I will get out the popcorn and await the fireworks,
You think that only Five Spies have intelligence and police services who think that easily hacked or dubiously grabbed data is a godsend?
France, Germany, Spain, Sweden and others have all been subject to extremist attacks, and whilst (in particular) the cabbage-munching masses might think that they should not and are not being spied on, I think that the interpretation and application of GDPR across all of the EU will have a big element of window dressing about it.
The companies who will truly feel the wrath of GDPR will not be big tech, they will be large, high profile companies who DON'T generally scoop vast amounts of user data, but make mistakes anyway, and they will be companies whose data is only marginally useful to cops and spooks. FMCG companies, energy suppliers, water companies, retailers, traditional publishers for example.