This case is a bit different.
GDPR did a lot, true. However, there are deals between EU and US that make the data exchange possible - under certain circumstances, there is not so much you can do, even if you check all the boxes in the "right to be forgotten" and all that.
I do agree that we needed GDPR and even stronger rules for data privacy against companies making money with your data (which is what GDPR is about).
But EU vs Tiktok case is clearly about governments spying and basically collecting data they shouldn't. It's beyond "data sold for marketing purposes" which the GDPR protects you against.
This is why I think there is a "trust" or let's call it just "deal" between EU and US when it's about data used for purposes beyond marketing. From time to time you'll see the BS scandal that US is spying on EU politicians, but that's to me more of a way to sell newspapers/ads than actual politics.
Let's not forget that US helps EU governments to fight also terror attacks - how, if not with data retrieved by spying on citizens? I believe it's convenient for everyone. And don't tell me EU governments don't spy on American politicians? Sorry but I don't believe it, like AT all.
In this speecific case, honestly, I don't even understand how it's possible that government officials use tiktok on their professional phones. I myself do not install crap on my company phone! And I am a freaking nobody.