Indeed, gdpr was created for corporations to have legal basis to process and sell data. Before gdpr it was a gray area. It was never about privacy.