#gdpr is not even strict enough, IMHO. If sites that had months if not years to prepare now simply - temporarily or permanently - block visitors from #europe that says a lot about their business mode. Avoid them stubbornly. Give them no traffic. They're malware in disguise.