Sites: implement things that are actually illegal under the law
HN, en masse: the law is bad, how can you say it's good?
EU has been very slow in going after websites, but I do hope they pick up the pace.
How exactly did it overreach? Every country in Europe had data protection laws prior to GDPR. All these shitty sites ignored them.
So EU created a single law. If you want to sell people's data without their consent, go <expletive deleted>.
The US will eventually have similar laws as well (CCPA is one if them)
Sites: implement things that are actually illegal under the law
HN, en masse: the law is bad, how can you say it's good?
EU has been very slow in going after websites, but I do hope they pick up the pace.