Well, the point of the GDPR is to make you aware that collecting personal data of EU citizens requires their explicit consent. Just ask me for it, that's not a big deal, is it?
If you don't, you're effectively stealing from me and I shall expect my government to go after you to the full extent of the law.
If you don't, you're effectively stealing from me and I shall expect my government to go after you to the full extent of the law.