Why the right to opt-out, instead of requiring sale of data to be opt-in?
I’m not sure how this stuff happens on the backend, but if I sign up for something and there is an opt-out page buried somewhere, I assume they’ve already sold my data by the time I can get to the opt-out page. I still make a best effort, but once it’s sold, it’s really too late. There needs to be an option to never sell it in the first place.
"We recognise you are attempting to access this website from a country belonging to the European Economic Area (EEA) including the EU which enforces the General Data Protection Regulation (GDPR) and therefore cannot grant you access at this time. For any issues, e-mail us at info@franklinnews.org or call us at (847) 497-5230."
This is extremely funny given it's an article about privacy concerns :)
More accurately, "we do not have the staff or funds to figure out what every single random law around the globe requires of us, and since foreign countries are not a realistic advertising market for a local Michigan newspaper, there's really no reason for us to try."
This may be true for in house ads, but there are ad networks that already are able to personalize ads and have ad inventory for such foreign countries.
The data download and removal side of GDPR seems useful for more "entrenched" use cases where you have an account and a long history on a service but... fly-by website visits should not be this heavily regulated. Blocking cookies and scripts is trivial.