Comment by nickpp

Don't forget that companies are made of people and an individual is a company of 1.

GDPR is pretty much DRM for an individual's personal data.