Reading about all of this is so surreal for me as a German. I read about these "great" policy and all I can think is ... "so, they do the minimum required" .. what's there to praise? Then I remember how US (companies) tend to think about privacy and get very sad. Stronger penalties for anyone breaking relevant privacy rules cannot come fast enough.