It's not hard to understand. It's only hard to understand if you've built your business around slurping people's data and using it without consent - something that's already mostly illegal in the EU.
A lot of GDPR is not new. It's just clarification of existing law.
A lot of GDPR is not new. It's just clarification of existing law.