It's not a pain. Regulations are there to be followed and I don't think GDPR is wrong. I honestly would rather set up these systems so that it can be done easily and being compliant with the law and user expectations.