Not applicable to all countries, only to your jurisdiction.BTW
You're being sold vaporware if you are being sold privacy, your WHOIS information should be protected/redacted by GDPR/POPI
Also, ICANN is working on a way around GDPR, because it is in effect empowering child abuse/porn, illicit site, terrorism,criminal/phishing etc owners by allowing the registrars not to even capture personal details in the name of GDPR. This takes away the responsibility one has when owning and operating a domain name on the Internet to comply with ICANN's rules, and rules in most countries (literally almost 99% of the world does not allow child abuse/slavery/porn sites etc, many don't allow criminal activities etc) - require the ability to identify an actual entity from a domain - be it a Proxy that can be queried or summonsed, an individual or a company contact.
The most likely way forward is going to be how Privacy companies manage your WHOIS data now. It will be redacted by default to eveyone, but on presentation of a valid court order/summons/etc the data must be released. This can be driven to bypass intra-country boundaries by amending ICANN rules for the specific reason of domain names.