> It's not about whether data abuse is okay or not, but rather it's about the consequences of taking such a heavy-handed approach as GDPR did. It absolutely st

> It's not about whether data abuse is okay or not, but rather it's about the consequences of taking such a heavy-handed approach as GDPR did. It absolutely starts from "whether data abuse is okay or not". If data abuse is unacceptable, then the question is "what is the law currently doing to address that?" The industry had ample opportunity to self-regulate, but all we've received in breach after breach is long-delayed shallow apologies. The running joke is that Zuckerberg and FB have been on a 15-year "apology tour", giving hollow apologies for seemingly grave transgressions that other people warned about [1]. And given how tech unicorns like Uber treats fines [2], a heavy-handed approach seems to be the only way to actually curb the behavior in questions. [1] EFF in 2009 warned that companies could take advantage of the leaky Facebook API, predicting the Cambridge Analytica situation 4 years in advance. [2] In multiple jurisdictions that do not allow ride sharing, Uber has told drivers that they would pay the fines that drivers incur.