Well, the GDPR isn't there to fine companies for doing the wrong thing. A company's first violation rarely results in fines or disciplinary action. In any case, I do agree that the EU seems to move quicker and act stricter than other regions in regulating big tech companies.