> they'd still be subject to GDPR and other related privacy laws Just like they currently are breaking the law by using non-compliant data processing consent f

> they'd still be subject to GDPR and other related privacy laws Just like they currently are breaking the law by using non-compliant data processing consent flows (90% of the "cookie consent" flows you see out there don't comply), and how they broke the law for over a decade before the GDPR (turns out GDPR had prior art in most EU countries)? GDPR penalties are not enforced anywhere near enough for it to be a deterrent.