GDPR is the reason why we have cookie popups, and don't have companies driving through cities to scan number plates and sell everyone's movement records to the highest bidder.

And the cookie popups are only there because they never actually enforced GDPR as written.