Because it is an EU-DIRECTIVE.
Directives are not the same as regulations .
Directives are goals that must be achieved by adapting existing national laws or introducing new ones, and that takes time.
Directives are not the same as regulations .
Directives are goals that must be achieved by adapting existing national laws or introducing new ones, and that takes time.
The EU is not as federal as the US and has basically no "federales" law enforcement of its own.
The Data Protection Commission in Ireland are remarkably lax about enforcing it because the government quite likes the tax revenue that Google, Apple and Meta brings them.