How does this work, why are they banning individual companies? Shouldn't they be pointing to the regulation broken (or just set up such regulation)? Is the problem here that this is on the federal level and there is are no federal privacy regulations so they just have to wing it?

Speaking of which, how does this work with the GDPR? Does TikTok abide by the GDPR in Europe or are they just not able to sanction them for violating it?