GDPR's rollout is not only rolling back the prior protections its citizens enjoyed, but is firmly entrenching, under legal protection, all of the most privacy invasive elements of our modern digital surveillance society, including helping to roll out mass social media facial recognition. The article was later cited in an El Pais article.