doesnt matter that it worked well if it still happened.

I believe it has had an effect.

As an example, I work for a European company whose product tracks people in an indoor space, as a byproduct of its main function.

Our (German) CEO made it clear we were constrained in our product development by GDPR's stipulations around pseudonymous data and data retention.