You've got this completely the wrong way around. The problem is not that companies with large legal departments can't follow the law, but rather that some of s

You've got this completely the wrong way around. The problem is not that companies with large legal departments can't follow the law, but rather that some of such companies are pathological choosing to break the law. They think they can get away with it because few breaches are prosecuted, and based on highly dubious legal interpretations concocted by their large legal departments. GDPR is not difficult to follow (or indeed "mental"), and is a huge boon for consumers. In a way it's even a boon for businesses - it can reduce their legal risk by encouraging them to only collect PII when they have a good reason to do so.