It is almost a year since GDPR came into effect, and what started life as another annoying EU regulation has become a global catalyst for change. Perhaps its most unexpected consequence has been to shine a light and expose the often questionable - but at the same time highly profitable - practices of big tech’s data-by-stealth business model.

GDPR marked out some boundaries that until last May had been poorly defined and hardly ever policed, allowing a...