Small correction: GDPR was passed in May 2016, but only came into effect in Apr 2018, precisely so that companies had two years to make the necessary changes.

In other words, GDPR is literally older than TikTok by 3-4 months (initial release: September 2016).