GDPR is not providing effective protection for citizens against the use of profiling for deceptive political campaigns using micro-targeting.