I think this is mostly the difference between American and EU regulation and enforcement. It seems like US institutions like to take a big player, make a huge

I think this is mostly the difference between American and EU regulation and enforcement. It seems like US institutions like to take a big player, make a huge case and then hope everyone else is scared enough to follow. In EU on the other hand the first inquiry would be validate the practices, allow corrections and if they aren't timely start stepping up the fines. In the end you end up with the huge cases like for example the browsers or Apple tax payment and by that time you have a law with regulations and previous judgements to stand on creating a system that's hopefully understandable and easy enough to follow for the regular user with good intentions.