From the final paragraph of the article > In the end, users should never only rely on laws and regulations such as the GDPR to protect their privacy. Instead,

From the final paragraph of the article > In the end, users should never only rely on laws and regulations such as the GDPR to protect their privacy. Instead, they should be aware of who they are providing which data to. Ignoring the fact that GDPR is primarily a regulation ensuring that they know who they are providing which data to, and ensuring they have a choice about providing it.