This particular case is a poor example. It's about someone screwing up her password management and getting pwned, and then suggesting everyone should be burdene

This particular case is a poor example. It's about someone screwing up her password management and getting pwned, and then suggesting everyone should be burdened with two-factor nonsense to protect her from such a thing ever affecting her again. But the GDPR itself, yes, of course it has negative effect like most centralized bessermachen from the EU commissars has. I've never understood all the starry-eyed hosannas for this slide down into supranational control of things no governing body ought concern itself with. It has its moments, if you're into dadaism. The other day I had phone call from my vet. Because of GDPR they felt obliged - belatedly - to mail all customers some info about why and what. They didn't have my email address, could I please give it them?