GDPR provides a legal framework through which Europeans are able to get companies to honor their wishes with data .

While it has teeth, it does nothing to physically stop a bad (or unconcerned) actor from don't something you don't want with that data, and once they have it you can't put Pandora back in the box.