It certainly has authority to block it from doing business in the EU if they don't comply, and to back that block with legal action against employees or assets

It certainly has authority to block it from doing business in the EU if they don't comply, and to back that block with legal action against employees or assets inside the region if the company keeps breaking the law.