EU GDPR is meant to protect EU citizens personal data. What constitutes "personal data"? Well, even their name if that is enough to identify someone (e.g. Marilyn for Marilyn Monroe, is considered personal data even if that one is not her real name..ah, burocracy!).
A real concern is WHERE data is stored. If you retain data on your server you become responsible for any data breach/loss, you have to assess a risk analisys, implement procedures to promptly (72h) signal data breaches to authorities and obviously are the end-point of any request from the user about his/her data (what data you retain, why, for how long, right to delete..). All this for simple personal data. When you touch "sensitive" data (medical, legal..) everything goes a lot worse.
A way to bypass most of the burden is to delegate data processing to companies declaring their conformity to GDPR. This way you need the consent from the user to process his/her data by a third party, clearly specifying the policies involved and finally hope that eveything will go smoothly..forever.
Anyway, we as programmers are requested to consider the data protection "by design"; this means that we should design our sw in ways that minimize the possibility of data breaches (e.g crypted data, SSL-only transmissions..).
Well, all that (and more) while W10 let's hundreds of stealth connections to who-knows-where go under the hood.. Don't believe me? Activate a firewall and monitor the outgoing traffic (yes, even Photo or Explorer pretend to call home). And what about those gems that make use of your browser (in my case FF) to exchange traffic on port 443 with unknown data centers?
Recently I dared to negate the use of the mic to the built-in Camera app of my mobile..it stopped to function! I understand that it could be needed when shooting a video, but why disabling the whole app?
Common sense tells me that when I buy something that object is mine and I can do with it everything I like (under my responsability).
Authorities rule things out along the lines that I'm an idiot, only they know which is the best for me while facilitating those who support them.
Freedom? Just a seven letters word. Forget it.