And yet, multiple companies that do all kinds of crazy things with your data (https://www.google.com/search?q=gdpr+shutdown) have shut down already as a result of GDPR. You could argue that wasn't the goal but I'm pretty sure it was part of it and seems to be effective in that way at least.
Like what exactly? The vast majority of them don't do anything that crazy other than storing an email or running some ads on the site, which is completely insignificant compared to the detailed profiles that Facebook and Google have and will continue to maintain. And it doesn't even touch the ISPs, credit unions, medical companies or other deep databanks.
Right now there are billions of people around the world clicking "yes" on all the privacy and consent popups while grumbling about the annoying notices and just wanting to get back to what they were doing. Meanwhile there are also plenty of people creating havoc by filing lawsuits against every company they can, adding up to billions demanded on just the first day.
> Meanwhile there are also plenty of people creating havoc by filing lawsuits against every company they can, adding up to billions demanded on just the first day.
No, the EU is not the US, no lawsuits have been filed. Some individuals have reported some companies to their local data protection agencies, just like the GDPR says you should. No money has been "added up to billions", because the DPAs don't sue for damages, the levy fines to ensure compliance.
Huge difference. If you're going to critique the GDPR, please understand how the legal and regulatory systems of Europe work first.
