The principle of free movement of personal data enshrined in primary and secondary law should also apply in the cases where the GDPR allows member states to regulate specific matters.
So, what happened to the protection of personal data then?
Oh it's anonymized!
Well that's alright then...
So, if I understand this correctly, I could, in the future, face EU sanctions if I don't allow other people access to data that I generate? Really?
That can't be right, can it?