> I'm also talking about the ability to download your data or to delete your data from their servers, which was also the outcome of GDPR. I’ll admit that I did

> I'm also talking about the ability to download your data or to delete your data from their servers, which was also the outcome of GDPR. I’ll admit that I did this years ago so it may be different now. Facebook just gave me a copy of the data that I explicitly uploaded to Facebook: text posts and images. There was no other data about my login history or request history or anything else that (I believe, perhaps mistakenly) the GDPR considers as my personal data (cross-site tracking is the big one). There’s also no way to verify that my deletion request was honored, even for those text posts and images, but that will probably never be false so that’s kind of a weak point, IMO. Not that I disagree with your overall point, just wanted to offer some words of concern on this particular point.