Moving the blame from the EU data privacy rules to literally everyone else is frankly just ridiculous.
Really could be either way.
Unless your point is the legislation didn't go far enough? I didn't personally read it that way.
Now, I believe this and you’ll find this belief implicit in much of the criticism of the EU regulatory directives but a reasonable person might disagree.