> GDPR is a piece of human rights legislation.

Not only that, to a certain degree it also influences IT security: Companies with a data breach have 72 hours to report it.

No more sitting out breaches until users can find their own data on some obscure Russian forum, 2 years later.

As a note - this is only one interpretation of the situation. In my opinion, if the privacy policy of a website is clear, then using their service and having one's collected data used as stated is not infringing on anyone's rights.

Most users aren't tech savvy enough to block tracking technologies and don't have the legal knowledge to actually understand byzantine privacy policies written in deliberately confusing legalese. It's not obvious that the presence of a "like" button, an ad unit or a hidden pixel means that you're being tracked by a third party. None of us have the time to actually read and understand the privacy policies of every single website we visit. The old "by visiting your website, you agree to our terms and conditions" doesn't actually give users any choice in the matter - you're being tracked before you've actually had the chance to read the policy. Opt-ins without opt-outs create a ratchet effect of ever-diminishing privacy, especially when those opt-ins include overly-broad third-party permissions.

GDPR doesn't stop you from creating a service that's a massive invasion of privacy, but you've got to ask permission first in plain language and allow people to change their minds later. If it turns out that users aren't willing to give that permission and revoke permissions that they have previously granted, it vindicates one of the basic arguments for GDPR - users wanted privacy, but they weren't being offered the opportunity to make a free and informed decision.

Consent must be informed in all cases. If a user does not know the privacy policy of your website while using it, it is not informed consent. How do you make sure that the user is aware of the privacy policy while using the website?

Are you talking about cookie tracking? Most websites show their privacy policy or provide a link when you sign up, before one provides any personal information. Either way, nearly all websites have a privacy policy in their footer which can be read before continuing.