If by GDPR you mean the cookie banner that appears on most websites? It's as if we ask for something and are punished for it. I'd like to see some proof that GDPR has achieved major changes in data privacy before a copy-paste.
GDPR primarily concerns the user with information and takedown requests, the latter which could be considered deletion.