if a site has a "gdpr popup" then that means they are doing something that the know is morally and legally questionable - not that the law is wrong ffs.
I wish you guys the best of luck with it, though. I would like for my country's notion of "who owns my data?" resolve more to "me". I'm torn about how much it'll cost me to own my own data, though, in a reduction of frictionless free stuff on the internet.
plus i can now get my data from lots of sites as they cant be bothered to restrict non-eu people to not have the functionality.
plus quite a few more sites / services have options to delete my account and data that only came about because of gdpr
plus it seems like other places are considering similar laws too so then the "benifits" will be felt by even more people.
oh and now you get an indicator of how crumby a company is by how hard it is to opt out of things.
dunno it just seems like a lot of wins. with the main downside being that my person data abuse is regularly brought to my attention via popups etc. but that doesn't seem sustainable - i am hoping its a transitional thing and company actually just start complying.. but i guess that will take the EU laying down some serious fines to make examples - which to be fair this article seems to be a step towards. seems like many other control systems (e.g. dangerous goods shipping or hazardous chemical controls) that the governing bodies are careful in applying the law to make sure they don't just fine companies into oblivion if they are making steps in the right direction and fix anything specifically called out.