I m not personally afraid of the data that commercial companies have collected on me , as i was consciously using their websites when i did . But it's more uneasy to think of the data collected by various security services. I am glad that GDPR is making people believe all their private data belongs to them (this is not true in modern states - government owns much of your data). At some point people are going to start asking questions about private data usage by governements. E.g. it is only a few years since governments started buying and using stolen private bank files to search for tax frauds etc.