[alkonaut]

The GDPR is mostly good. The right to find out and delete the data is excellent. The bad thing is the constant consent popups which have become synonymous with the GDPR.

Obviously there are also still a lot of sites that try to wiggle around the GDPR by saying "By entering the site you agree to X", a practice that should soon be found to be in violation of the regulation. If that is allowed, the regulation for storage/processing becomes almost pointless.

That data collection should be opt in if it isn't an essential function of the app/site/service.

[icebraining]

It's certainly in violation - Recital 43 is quite clear on that.