WUT? GDPR gives you controll of your data, which all those "saint" vc-blessed startups from siliconvale hate with passion... (and they can go * themselves :D)
At any rate - the mass surveillance effort is just an idea pushed by some MEPs/comissioners... it would be nice to be able to dimiss those.
Besides, there was also a complain about "cookie" banners but the UE didn't mandate to make annoying popups - the intent was to force services harvest less data... as it shows - if the law is not explicit enough then private business will try to circumvent it and push users to hate the entity/the law ('buuuu, stupid EU'... no - it's stupid and abusive corporation). At any rate I do hope that there will be push to make the configuration a browser setting akin to "DNT" with various levels ("allow all cookies", "only functional", "no cookies"; maybe more) and make websites follow it...