GDPR has proven incredibly useful to me and others in imposing cost on organisations and businesses that want to fuck about with our data.
Someone's acting the maggot? No matter where they are, they get a subject access request. Followed by a request to correct or delete data.
The ability to legally force companies to correct inaccurate data is incredibly useful.