The Cambridge Analytica situation wasn't a founding cause for the GDPR, it came to light after the legislation was already finalized. It just happened to coincide (roughly) with the GDPR enforcement date, and helped illustrate why such regulation was necessary.