> In the end the regulation was diluted to something that made sense(ish) but that process took about 4 years.

Is the same regulation that was introduced in 2016. The only people who pretend not to understand it are those who think that selling user data to 2000+ "partners" is privacy