So you now can give them orders to turn off the internet? Or look at data?

How is that compatible with the GDPR in any way?