This seems like something which can only benefit: 1) very large corporations

Same was with GDPR... It will benefit companies, who have money to do audits (and companies which do audits).