This is a good start, but I'm going to be very curious to see if EU data law ever starts getting enforced against european companies at scale, as opposed to international companies.
But also, primarily European companies did generally take it a lot more seriously than multinationals. (Sometimes too seriously; while this has calmed down a bit, you'll sometimes see companies enforcing absolutely absurd policies around data on the basis that they incorrectly think they're required for compliance).