Every law is made under some assumptions about the scale of things. For example, judiciary procedures were designed assuming certain number of active cases. Citizen services and bureaucracy around them is designed assuming some amount of work and staff size. Look at the US immigration / green card processes.

The designers of GDPR would have not expected thousands of partners sharing the data collected in a single click. The next review of the legislation would probably pick it up.

You can't number every limit and corner case. You come with precise terms and give a chance for people to defend their case in court.

We'll now see if "thousands of partners" is considered as a good match for "informed consent". Doesn't mean there is a need for review, unless the legislator is not happy with the interpretation that will be provided.

> The designers of GDPR would have not expected thousands of partners sharing the data collected in a single click.

The designers of GDPR (and most other EU regulations) expect businesses to behave like adults, not like petulant children.