Not sure how GDPR is relevant since Elon Musk isn’t the EU data commissioner so it’s not up to him to enforce GDPR, and neither Musk, nor Twitter itself, nor the journalists, nor the sites concerned nor the information in question is in any way European[1].

Here’s the definition of personal data under GDPR[2] for anyone who’s curious. If this information hypothetically were to be published by a company with a European or UK connection about an EU or UK data subject and that person were to complain to their national data protection authority we might be in GDPR enforcement territory.

[1] or UK because UK GDPR is a thing even though the UK is no longer in the EU

[2] https://www.gdpreu.org/the-regulation/key-concepts/personal-...