Maybe I should be more specific to making money online- but nobody collects data that I didn't give them. The tone of EU laws is that instead they 'took' that data from me.
This assumes that people understand what data is gathered. Which is the whole informed consent that is required by the GDPR.
You can still say "I want you to take my data and I'm fine with it" as long as the site made a good effort of explaining what and how they are using it.
Just an anecdote, but people always reacted with shock when I tell them what information is gathered.
This information was always public though, just no one cared. 'Information wants to be free' is a universal law, not just for governments, universities and corporations.
