The problem with GDPR is underspecification and bad enforcement because the agency of the country where the company is registered is responsible, and the fuzzy

The problem with GDPR is underspecification and bad enforcement because the agency of the country where the company is registered is responsible, and the fuzzy nature of the law allows companies to drag out fees with long legal battles. The annoying popups are basically malicious compliance. We'll see how things play out here, but this time there are a lot of provisions that should make enforcement easier.