That wasn't even the GPDR and it did even less for user privacy.