Comment by AlienRobot

Like I said, GDPR only stops the smallest websites from doing that, and in most cases they're barely a "business," they're just some website that gets paid only enough in ads to cover its hosting costs so that the webmaster doesn't have to pay money on top of time to publish information for free for everyone on the internet.

The largest websites will still "violate its users in secret." That's why I don't think GDPR is as useful as people purport it to be.