GDPR in Europe puts it at 4%, and yet we are seeing leaks every week.

10% maximum mean nothing if it’s not enforced, you got to make examples.