Uh, no. GDPR is about how private data is stored, handled, and removed - and if it could be sent to third parties then only with the user’s consent. The consent is only a requirement if data is being sent to third parties - not sending data to third parties is perfectly fine and almost encouraged.

Source: working heavily with PII and talking to data privacy lawyers quite often