Whilst GDPR partly aims to help educate the user about data being collected, the extend and details of such data are underestimated. Mostly because no company s

Whilst GDPR partly aims to help educate the user about data being collected, the extend and details of such data are underestimated. Mostly because no company specifically calls out the exact data they collect; They describe it broadly to avoid having to ask for consent again when they add a new product or feature. You only truly understand what data is collected once you make use of the obligated download feature and look through the data. Also, GDPR does not apply to Intelligence Services, their legal limitations are dodgy at best (on purpose).