GDPR = has great intentions but so badly misunderstood by many.
At one pole there are those who are sloppy in protecting your data and at the other pole those who are over-protective to the point of it being damaging.
Quick example of the latter - I knew of a cricket club junior coordinator...