The Consent and Documentation provisions are the only part of the GDPR that protect your privacy. Without that the Access to Data provisions is largely moot. Wh

The Consent and Documentation provisions are the only part of the GDPR that protect your privacy. Without that the Access to Data provisions is largely moot. Why would it occur to anybody to send access requests to some large market analytics company they've never heard of? Its beneficial in the narrow scope of cases where a data subject knowingly consents to a party that they are directly familiar with having their data (like Facebook), and they want to find out specifically what it is. But your average data subject is being tracked without consent by a myriad of companies they've never heard of, and all that data is aggregated and sold on by a myriad of other companies they've never heard of. Without informed consent, the GDPR falls incredibly far from even coming close to achieving it's stated objectives, and that's basically where it is today. And as I said, for the companies that actually do have to worry about enforcement, it's largely just incorporated into the cost of business.