ICANN will win
Does GDPR cover businesses?
How does it handle regulatory filings?
When you start to consider the details that you provide... you have no privacy because you're providing necessary contact details.
Its when those details are fake that you run in to problems.
If you've ever had to run a domain... and you trace back bad behavior to another user on another domain, what do you do? In the past, you look at the whois information and you contact their admin.
Now, I guess you just spin up a DDOS cloud and retaliate or some other immature stunt.