I can agree with the motivation, but the law is not particularly well written.
If the EU passes a law and it takes armies of lawyers over two years of negotiating with the EU to find a compromise of what is and isn't included in the law (with the EU changing its stance regularly), then it probably isn't a good law.
It took a year and a half of wrangling for the EU to decide that internet advertising was not a "legitimate business interest" or "necessary to perform tasks at the request of the data subject" (despite the advertising being a primary source of funding to pay for the requested task). Then the entire internet advertising industry had just 6 months to design/implement/deploy a system that can meet the requirements and migrate all their users to the new platform (keeping in mind that their users have a financial incentive not to switch, since the old system is more profitable).
There's also the weird catch-22 of how it only applies to users with EU citizenship, but you can't collect, use, or store the information on whether or not they are an EU citizen without their permission.
If the EU passes a law and it takes armies of lawyers over two years of negotiating with the EU to find a compromise of what is and isn't included in the law (with the EU changing its stance regularly), then it probably isn't a good law.
It took a year and a half of wrangling for the EU to decide that internet advertising was not a "legitimate business interest" or "necessary to perform tasks at the request of the data subject" (despite the advertising being a primary source of funding to pay for the requested task). Then the entire internet advertising industry had just 6 months to design/implement/deploy a system that can meet the requirements and migrate all their users to the new platform (keeping in mind that their users have a financial incentive not to switch, since the old system is more profitable).
There's also the weird catch-22 of how it only applies to users with EU citizenship, but you can't collect, use, or store the information on whether or not they are an EU citizen without their permission.