GDPR's first form was actually decent for what it was meant for, but that spooked tech giants, and with their lobbying (or whatever europeans call it) they poked so many holes in it that it's basically a colander with the botton cut out.