And the practical effect of this is you get a race to the bottom: countries compete on how lax they are going to be in enforcing GDPR so as to attract American tech companies.

The Data Protection Commission in Ireland are remarkably lax about enforcing it because the government quite likes the tax revenue that Google, Apple and Meta brings them.