GDPR isn't the end of stringent regulations for privacy in tech.
https://www.techrepublic.com/article/gdpr-vs-eprivacy-the-3-differences-you-need-to-know/#ftag=RSS56d97e7