GDPR is a great initiative. However it doesn’t prevent big tech from buying politicians, manipulating people or collecting massive data from individuals.

Look up 'list of gdpr fines in eu country'. For some reason, where I am, a lot of Mayors are fined (as individuals), and also their municipalities as 'entities'. Also, the national elecricity company has been fined, in various areas, various amounts from 1k up (guess who pays the entity fine?)