The GDPR requires data collectors to give an ordinary-language account to every user of what data they hold and for what purpose. This approach assumes that lack of such information damages the underlying right of each person to control her information boundaries, hence the need for an immediate alert when any activity potentially breaches those boundaries. The GDPR's practical requirements interrupt the supposed "naturalness" of data collection from individuals by requiring individuals to be informed of what is going on with their data.

Nick Couldry & Ulises A. Mejias, The Costs of Connection, loc. 554