When the GDPR was first talked about it was often characterised as being about stopping "nasty companies" using your personal data in...