GDPR is just a reassuring scarecrow meant to calm down most of the worried folks, but it is less efficient than an actual scarecrow at the task.
I only have firsthand knowledge for the organization where I currently work, but there at least, things have improved significantly because of the GDPR; they weren't even all that bad on the privacy-front - just... careless. But now most unnecessary data-collection has ceased, there's processes to remove collected data after it's no longer necessary, and even things like analytics usage on its numerous web properties is being severely restrained (which up until recently wasn't even possible; thank the GDPR for making google analytics introduce the option to set limits to data retention (and yes, google is of course being sneaky and trying to make the setting meaningless, but since the organisation which is using it now has awareness, they actually configured it correctly))
Things won't become perfect overnight (exhibit A: gog), but overall the GDPR is having a massive positive effect, and I can only see things getting even better in the years to come.
beware, though... GDPR's rules about data collecting, retention and analytics will obviously be tempered by already-existing legislation regarding anti-terrorism (which were already forcing 3 years of data retention on many online services, in my country at least)
i am very impatient/eager to see how far the good intents of GDPR are going, vs how far the anti-terrorism excuse will be used and abused by people wanting to bypass GDPR (but, you know... we are FORCED To collet and keep all those datas in case you need it against meanies, you know.. o, it's a cost for us to do that for free, and as data is here now, why couldnt we use it already ?)
dont laugh, i already heard such argument from some local company manager here
I think something else a lot of people are ignoring or forgetting is that things like game activity. game time, achievements, won't be tracked outside of Galaxy. So if you don't use Galaxy your profile is going to be pretty blank most likely anyway (of course we won't know for sure until it is released) but most things will probably be tied to Galaxy activity because it's pretty much impossible to track stuff without it.
well, you pointed at a TOS article that implied such things (collecting activities, game time tracking etc) seemed mandatory and required for GOG to be able to keep providing its services in good conditions (here i'm not puting the blame on you, you didnt write this article of the TOS, you just lit a spotlight upon it, that's all... okay ?)
and yes, obviously, many of those features require galaxy to be collected and generated...
which already raised both my concern and worry abouy Galaxy soon becoming less than optional, or that some galaxy-light edition would be mandatory to install and run for us to just play our games
for me, those new "social features" and "user profile" and all new "we are all happy friends family together" madness seems to be nothing more than a trojan horse to try again to make galaxy mandatory, thus really wanting to compete with steam on its worse (and mostly unwanted) side
Because if i want social BS, useless meaningless friendmaking, getting spied upon in what i buy/play.like and be forced to install a software to be able to use my games... why the hell would i go to all the trouble of doing it on GOG with games often behind in term of updates, fixes, or with missing features (or entire platform's version/port) ?
Could rather go steam already :)