GDPR has made sure that companies that don't respect human rights when handling data are fined properly. I saw it personally in the case of Dropbox, which told users it was going to start using their stored data to train AI models, except for EU customers.
Of course it doesn't show up in business valuations in the short term. If that's the only measure of a successful law then I guess GDPR is a failure.