I by no means and expert on the subject, but I believe that the "simplest" change would be to target based on content, rather than the individual user.
I believe this is intentional on part of the EU.
Name and shame. List the EU companies that are shitting on user privacy the way Google, Twitter, and Facebook currently are.
[1] https://iapp.org/news/a/germanys-first-fine-under-the-gdpr-o...
The American companies are simply bigger target and have the attention of more people, so their reported more quickly.
If a page on some website is about cars, then you sell that page as being about cars to the advertisers. At no point would you care about the user, just the assumption that a person reading about the latest Toyota might be in the marked for a new car.