Replying to @rigow and @johnnyryan, @jason_kint, @random_walker
It can't be just tech. GDPR is missing a strong first/third-party distinction, anyone can be a controller, and that breaks fast. Multiple controllership should be drastically curtailed. It makes sense for users, helps publishers, targets OBA.
♥ 2