The ideas behind GDPR are sound. The enforcement is severely lacking though. Thus its effects are too limited.
