It gives plenty of guidance and the 'enforcer', if one ever appears (vanishingly unlikely) is bound to be collaborative rather than adversarial, at least in the early stages.
Several companies have already been fined by the various country level data protection authorities that enforce the GDPR. So I'm not sure what you're talking about.
I really don't get the fear mongering over this.