> No, where do I say that?

That is how I interpreted whole paragraphs that you wrote about how data is still collected despite GDPR. If data that is collected is covered by GDPR than that is breaking the law otherwise I don't see why you would mention that some companies are still collecting data that is not covered by GDPR.

> My point is that GDPR still lets companies collect user data, legally.

> "Oh, now they need to ask for consent" doesn't really change things in practical terms. If Facebook still has billions of WhatsApp users, and if every user had to give consent to have the data extracted to use the service, in practice Facebook still has access to the data and can build a profile of billions of people.

That is not how GDPR works. You don't have to give consent to use a service and if you don't give consent whatsapp can't legally share any data it has on you with facebook.

> Companies are still collecting data at large. The requirements about consent do not stop them from doing collecting and exploiting data, they just add some extra hoops and create inconveniences.

Not all data is covered by GDPR so of course data is still collected. It absolutely does stop collecting and exploiting some forms of data in legal ways.

> On paper, you can "refuse consent". In practice, the absolute majority of people continued to use the services and devices from GAMMA (Google, Amazon, Microsoft, Meta, Apple), and the only way to use those services and devices is by giving consent.

Again, not how GDPR works. Literally, in the text of GDPR, there is a provision that states that giving consent can not be a requirement for using a service. That's why you get, if you are in the EU, those consent forms with accept/reject on GAMMA sites and the only "service" you lose if you reject is personalized ads. Recommendation algorithm might also be different. You really have no idea how GDPR works but you certainly have strong opinions about it.

> By forbidding data collection and brokering (tracking cookies, ad auctions) at all. By forbidding personalized advertisements at all. By forbidding ad-subsidized hardware. By forbidding hardware to be sold bundled with internet-connected software/services, i.e, they can either sell the software or the hardware, but not both. By forbidding any service to be commercialized unless it has a self-hosted version. By forbidding "freemium" services, i.e, either you charge from everyone or you don't charge from anyone.

Those are new regulations not some fix to GDPR to make it more than "protocol theater". Even your reasoning about why GDPR is "protocol theater" is based on your faulty "understanding" of GDPR.

> This is exactly what I am contesting! Having more money can help with getting more power, but we can think of ways where the concentration of power is limited without having to fight over the discussion of how to limit the concentration of "money".

Power comes in many forms. Concentration of money is concentration of power so if you want to limit power you have to have a discussion on how to limit the concentration of money. By ignoring the question of money and concentrating only on other form of power money becomes more powerful.

> No. People still keep property rights, and they are still free to associate with others. The only thing about my proposal is to eliminate corporations.

No, go read your comment again. It isn't only about eliminating corporations it is about business not being bigger than 150 people (how is that not a restriction on free association?), and inability of an individual to participate in more than one business (how is that not a restriction on free association?).