It's also sad that humans act so immorally that laws forbidding rape and murder must exist. Or maybe it's good that we can come together as a society and agree that these things are bad? Who knows
Well the big difference is that even without laws against rape and murder it is generally still a big exception. On the other hand tracking, carelessness with personal data, privacy violations etc. have been very much the norm with all companies (and arguably still are) even before the GDPR.