GDPR is an excellent idea if it was actually enforced, which it wasn't. To their credit, the non-enforcement was consistent regardless of whether the offender was EU-based or not.