My customers want their customers to have a good experience and to feel safe and secure. They want to follow the law. They also want analytics. By following a standard that complies with the law here in Europe they get some of both.

It's a fig leaf they can point to when lobbying to avoid stricter regulation in any jurisdiction that hasn't yet enacted new rules.