The purpose of GDPR was never data protection or privacy. It was designed to legitimise data trade and give corporations legal basis for selling and processing the data where before that it was a grey area. If you look at it through that lens, it will make sense.

Regulators are just a potemkin village thing to make it look like the law is serving ordinary person.

You're lying.