GDPR isn't only related to internet services. I received a phone call today from my mobile operator, they got bought by a larger company and it was a sales call. However, they were asking to speak to person in charge in regards to company-wide mobile subscription and services - we use none.
What was disturbing is that I was contacted on my private phone number in regards to a sales call related to the company I work at.
The details I left when buying their mobile service (which was 20 years ago) don't contain where I work at. I didn't work at all at the time, but I kept paying for the service.
I didn't update my account details so I found it a huge surprise when they knew exactly who to call and on what number.
Being a EU citizen, I went GDPR on them. I don't want people to call my personal number and disturb me in my own free time with sales calls in regards to my company. How did they get my details? Who authorized them to contact me? I've many questions and luckily - now I have legal backing when asking them to anonymize my data.
I really think (like the one I describe) that for many cases GDPR isn't going to have the desired effect, if the result is that we have to sit through notices on every site and click away to get through them.
This is simply false. GDPR only allows opt-in for these choices, companies are just implementing GDPR incorrectly.
https://iapp.org/news/a/heres-why-the-first-gdpr-fines-could...
"GDPR is useless, they aren't even fining violations!"
I'm waiting for "They are applying the law inconsistently - we got away with obvious violations for a year and now we don't anymore. The injustice!"
the cookie banner has nothing to do with GDPR..
The way GDPR works out it sort of expects us to care to follow this annoying process, and I don't think people do / want to and thus ultimately won't make good choices.
GDPR demands users engage in the process on the web in a very particular way. As far as that goes I suspect it will fail on that aspect.