The article is full of misunderstandings. The following sentence for example is just wrong:
'You can’t collect and store any personal data without having obtained, and being able to document that you obtained, consent from the persons you’re collecting data from.'
Consent is just one option. You can do logging without personal data. You might have a legal obligation do to (full) logging. You might have a legitimate interest. And so one …
It is wrong to summarise the GDPR as 'consent is always necessary'.