With the small difference that GDPR is empowering people while Chinese law is subjugating them.

Actually the law itself is probably not so bad... in my experience communist states always have decent laws, with various rights enshrined into them. It's just that in the implementation one always ends up with a boot stomping their face somehow.