Impossible to enforce.
- The right to be informed as to what data will be collected, and how it will be used
- The right to opt out of data collection or sharing
- The right to be told if a website has data on you, and what that data is
- The right to be forgotten; to have all data related to you deleted upon request
- The right to be informed if ownership of your data changes hands
- The right to be informed of any data breaches including your information in a timely manner
- The right to download all data in a standardized format to port to another platform
Speaking as European this just seems to be "let's copy that legislation".
People need actual property rights to charge a fee for their data. The monetary value companies obtain from users through advertisers or other consumers is a measure of this value.
It’s an entire market that does exist but is being taken from the producers.
No, explicitly not. That is in my opinion one of the great points of the GDPR legislation. Mandatory consent is not consent at all and hence void and websites have to accept "no" as the default answer.
Should they? Then you get back to same problem as before: "Allow us to spy on you or pay $$$".
Instead privacy is treated as right and you can simply say "no, neither of those". Note that this does not say anything about ads. It is still perfectly legal to show ads, just the whole privacy invasion on top of it is excluded.
What I don't see fit is that some people is willing to give away their privacy for a fee, and we haven't accommodate that!