I'll give them credit for doing a much better job than the US does. I still think they could go a lot farther. There was tons of praise for GDPR as having actual teeth, but there are still companies who are getting fined again and again and again because the violations of the law are making more money for them than the fines they have to pay when they get caught.