The article is not that wrong, though. The GDPR is quite an abstract piece of legislation and it's no wonder specific technical terms aren't used. To be precise, the article author should have perhaps talked rather about GDPR-based interpretations, consensus and enforcement.