To be fair, the GDPR is only good in theory but its enforcement has been severely lacking, as demonstrated by all the companies suddenly complaining about App Tracking Transparency, despite ATT only mandating what they should've done to comply with the GDPR anyway 3 years ago.
