This saying isn't even true. Many countries have cultural expectations and legal structures providing some level of privacy in public. The very first GDPR fine issued stemmed from a business security camera that needlessly recorded people on the sidewalk.