The GDPR comes across as a consequence of businesses not self -reguating themselves well enough. If businesses weren't so lacksidasical with personal information; and aggressive with marketing, we wouldn't need it!