American companies so far have been really bad at actually complying with regulations like the GDPR - many do on the surface level, but if you're a European company that wants to do things right and not take risks on the interpretation of things like "consent", suddenly your pool of potential third-party data processors drops significantly. There's a serious cultural issue there.