GDPR is just the newest privacy law, a lot of EU countries had privacy laws before GDPR. So it isn't that radical, but the fines are bigger. We've already seen

GDPR is just the newest privacy law, a lot of EU countries had privacy laws before GDPR. So it isn't that radical, but the fines are bigger. We've already seen quicker reporting of breaches. Web trackers are down [0]. Telemetry without an off-switch has been ruled in violation (Microsoft Office [1]). In smaller cases, apps that don't secure passwords properly have been fined [4]. I'm sorry for linking to el Reg so much, but there just aren't that many English language news outlets covering these things. As for "forcing me to consent", it violates the GDPR (e.g. [2], ICO "consent cannot be freely given and is invalid"). This is largely websites trying to see how far they can push it, because the data protection agencies aren't handing out fines straight away. This is actually very frustrating in obvious cases. If you'd like to help getting rid of them, but aren't a European or can't be bothered reporting them to the relevant data protection agency, Max Schrems has founded https://noyb.eu/ https://noyb.eu/. Privacy international has also done some work in this area [3], but Schrems seems to be focussed on the "smaller" violation such as popups, and has a great track record. [0] https://www.theregister.co.uk/2018/10/12/gdpr_helps_google/ https://www.theregister.co.uk/2018/10/12/gdpr_helps_google/ [1] https://www.theregister.co.uk/2018/11/16/microsoft_gdpr/ https://www.theregister.co.uk/2018/11/16/microsoft_gdpr/ [2] https://www.theregister.co.uk/2018/11/19/ico_washington_post/ https://www.theregister.co.uk/2018/11/19/ico_washington_post... [3] https://privacyinternational.org/topics/general-data-protection-regulation-gdpr https://privacyinternational.org/topics/general-data-protect... [4] https://www.theregister.co.uk/2018/11/23/knuddels_fined_for_plain_text_passwords/ https://www.theregister.co.uk/2018/11/23/knuddels_fined_for_...