Surely we want just a simple rule that says each person has to give express, clear, permission for any data held about them to be passed on. If data is currently held people cannot pass it on. Simple. No doubt some Brussels bureaucrats have to translate this into 27 languages at our expense too. Jobs for the boys.
GDPR = Great Deal of PRoper crap!