I think the GDPR creates benefits in more areas than you may be aware of.
For example I used to work for a hosting provider. An admin noticed that one of the hosted customers had customer data exposed to the internet without a password. Due to the GDPR he was forced to contact the customer about it, or our company could be held responsible (since we knew about it).