It's really funny because the blog post is far more ambiguous than the GDPR. He cites no specific provision of the GDPR, he doesn't quote the law, all he does i

It's really funny because the blog post is far more ambiguous than the GDPR. He cites no specific provision of the GDPR, he doesn't quote the law, all he does is offer up the big scary $20m number. It's pure FUD. But since we're throwing out wild speculations it's more than possible this guy was doing something really shady. (He admits to affiliate links which are perfectly fine under GDPR). There would definitely be a market for user data even about who's borrowing what, where. Certainly the vast majority of these "the GDPR killed our free business" are precisely these shady businesses who knew they were dead anyways if they had to actually ask their users for consent in plain language.