You are conflating GDPR and the annoying cookie dialogs.

GDPR regulates, among other things, how information is stored and deleted on servers. I have worked at multiple companies in both Europe and the US who take this very seriously and has definitely altered their practices based on this.

For example, pre-GDPR, we would "mark as deleted" but not delete. Now we delete.