Comment by tgsovlerkhgsel

The main problem with GDPR is that it is hard to enforce because the enforcing authorities are overworked, focusing on the wrong things, and bogging themselves down in their own bureaucracy.

> only applies to user-supplied data, not all personal data

I don't believe this is correct: https://gdpr-info.eu/art-4-gdpr/

Maybe you're confusing this with the different lawful grounds for processing, and the fact that consent has quite strict requirements but there are other lawful grounds that don't require consent? https://gdpr-info.eu/art-6-gdpr/