When it comes to the GDFPR, I find it curious how people constantly overlook it does nothing to shutdown the bad actors. Just creates some fines the large companies can pay, requires them to rewrite their software, and add a few additional bits to their EULAs so it can be business as usual.
The fact it did not outlaw the sort of datamining Google and Facebook does and adds in toeknized pseudonymisation is all one needs to see it is a joke. Sure, you can ask them to delete the mapping key, but that is pointless with the amount of data being gathered as it will quickly be regenerated.
Crony capitalism at its finest. Allows large companies to be pieces of shit while helping lock out smaller ones.
It utterly ignores what it is trying to regulate is a market that needs to flat out die.