I don't think you've read GDPR. In Europe (at least my part), *every* organization has a GDPR policy you need to agree to. Your child's school. Summer camps. Etc. Most are also conservative and reasonable.
What's broken is the GDPR popup with a dozen "legitimate interest" toggles for spying on you.