prohibition of secondary use
It looks really nice on paper until you remember big tech companies shit on local laws and, when caught, they simply pay fines and brush them off as "operational costs". And that it'll be rather hard to prove the data is being used secondarily.
This shit will be still used for profiling and targetted marketing/spam/advertisement. I'm pretty sure of that.