Larger and larger corporations are needed to violate EU privacy rules and get away with it.
After the initial scare of the GDPR, most organisations found a way to live with them.
But obviously, it will become very tricky, and potentially costly if you want to violate people's privacy.