In eurolandia one usually sicks GDPR on their behinds. Low level scum may ignore it at their peril and companies with high exposure will comply really fast.