The GDPR is designed to protect citizen's right to privacy and prevent websites from just plundering and selling people's private information. We need more places to implement GDPR style laws to ensure that companies don't think that they own people's data.