Data protection laws existed in Europe long before GDPR. Every country had them. And companies would simply disregard them until they became GDPR with the promise of fines and enforcement.