The effectiveness of the sentence: "In relation to national law, the GDPR applies as a matter of priority to all automated processing of personal data as of May 25th, 2018 [...]" is understood by experts. The Düsseldorfer Kreis – the conference of the independent federal and state data protection authorities on April 26th, 2018 – thereby confirms a regulatory framework – and once again surprises an entire industry. Just as, for example, the financial industry has underestimated the determination of the regulation for a long time, the media industry seems to underestimate the inherent connections between technological opportunities, changing regulatory conditions and the associated changes in decision-relevant parameters until now. This generally assumed that the previous regulations of the Telemedia Act would remain in force until the new ePrivacy regulation came into force, or at least could be based on the so-called legitimate interest according to Art. 6 para. 1lit.f) GDPR, i.e. the processing of personal data was covered by the