GDPR is about far more than some browser pop-ups - it severely limits the extent to which companies can harvest and share your information, even if you blindly click through those consent boxes. It confers a bunch of rights to citizens for discovering and controlling who has their data. Most importantly, it creates a disincentive for companies to be lax in securing the data they do have.