The solution is to make a worldwide framework where people OWN their data. That's not what GDPR does, it in fact prevents people from selling their data at will.

(People's privacy is protected by constitutions. That is orthogonal to the ability of people to choose how to use their data)