GDPR has one single goal - to allow aggregated presumably anonymous data markets. Period. Everything else surrounding it is diversion in a plain sight.
the primary goal of anonymizing users, pushed down the throat of otherwise very oblivious service providers (such as your website selling dick enlargement machinery), is just not never going to work.
on the other hand, provider such as telecoms are now, being GDPR-compliant, absolutely in their right to sell the aggregated data. so are rail services, and bus, and everything that touches IDs and alike. even your gov. cheers.