What's stopping a regime to enact these regulations in 30 years, if it feels it needs them?

That argument works against things like data retention laws (the new regime may find 'new uses' for data already retained) but if anything, GDPR discourages data retention