You want to share it? Get my express consent.
That's literally the GDPR? But the problem is that enforcement is severely lacking, so it is more profitable to breach the GDPR than to comply with it.