I agree that the cookie law was a mistake, but I don't necessarily agree that it has any bearing on the GDPR's effectiveness. I won't wade into whether the law

I agree that the cookie law was a mistake, but I don't necessarily agree that it has any bearing on the GDPR's effectiveness. I won't wade into whether the law is better for certain businesses, that's a complicated topic that I don't have the cycles for. But what I will say is that the requirements[1] sound like really good benefits for consumers. Being able to go to Facebook and say "delete everything you have on me" is a huge plus. Being able to go to Whatsapp and download all of your contacts and messages in a 'commonly use and machine readable format' is awesome. Now, of course, the devil is in the details. If 'machine readable format' is poorly defined, that provision is useless. If the consent provision requires 120 pt red font legalese on every page you enter data into, that's ridiculous. But since neither of us is going to go read the thing... at least the goals are good. 1: https://www.eugdpr.org/key-changes.html https://www.eugdpr.org/key-changes.html