Companies think they own the data they collect on you. GDPR tries give you some control over this data.

You think that works in practicality?

Its made companies think more and put processes in place to manage and eventually delete user data. Thia is based on my experience of internal IT in the UK corporate world during and after its implementation. The data was often exported to spreadsheets and kept informally.

Understand the attempt, but wonder if it just turns people into mindless click droids...