GDPR applies to companies operating in the EU, not every single entity on the internet. Posts on random forums are not subject to these laws, so I don't think Lemmy would count.

Now if a Lemmy operator began using user personal data for profit, then GDPR would apply. At the moment, I don't think that's happening anywhere in the fediverse.