That's still true. The GDPR needs to have stronger teeth though, because the solution isn't for me to be wary of who has data about my bedroom activities, but rather making having that data into a problem for them.