We take GDPR very seriously in the EU. Fines are steep. There are difficulties getting foreign companies to comply, and there isn't a one-size-fits-all compliance toolbox for those breaches.