Is the EU parliament really the body we want setting standards for interoperability? Things like this typically result in unintentional externalities that cost

Is the EU parliament really the body we want setting standards for interoperability? Things like this typically result in unintentional externalities that cost providers money and impose compliance burdens that are quickly out of date. I appreciate the sentiment regarding security and interoperability, and they might be able to declare their intention to procure only systems that meet X standards, but I hope they refrain from broader impositions on commercial users and cloud providers. NSA articles aside, I see businesses fleeing regulatory burdens faster than the possibility of surveillance.