Due to uniform surveillance, users couldn't make decisions about their own data before the GDPR. So, no, it's not. Plus, the GDPR itself is the democratic expression of user preferences in face of the market failure to respect them.
And finally, the GDPR does not apply in Lebanon. Though since the US "kills based on metadata" [1], the "lifesaving" goes both ways.
[1] https://www.techdirt.com/2014/05/12/michael-hayden-gleefully...
