i'd argue that, at least in my european country, there already more severe laws regulating such thing that might earn you jail time, while gdpr wasn't made with that in mind

The problem is enforcing those laws now the Trump administration is using X and other social networks as instruments of national policy and forcing others to use them, to the detriment (potentially considerable) of European societies.