Another thing that was just recently examined (in this case by the french privacy authority) is the savings given by applying gdpr https://www.cnil.fr/en/economic-impact-gdpr-5-years

https://www.cnil.fr/en/economic-impact-gdpr-5-years

unfortunately the whole texts are in french