Legislators in the US can, and more states are, passing laws against revenge porn so I don't think that's a good example. I do think fraudsters will attempt to

Legislators in the US can, and more states are, passing laws against revenge porn so I don't think that's a good example. I do think fraudsters will attempt to use the GDPR to erase their fraud histories. Companies will need to carefully delineate what data is used as a legitimate interest vs consent bases to make sure they can continue to use fraud histories in their anti-fraud efforts.