The EU is clearly leading the way in consumer protection, but it still leaves a lot to be desired, and in some ways it's regressing.
The GDPR was well intentioned, but poorly specified, so companies resorted to all sorts of loop holes. It also wasn't enforced well or harshly enough, so fines just became the cost of doing business for companies. Now it's being rolled back to meet "growth" demands and appease "AI" companies.
The Chat Control regulation is on the horizon, and bound to be passed in some form soon. I suppose we must sacrifice privacy to protect the children.
So it's good that some effort is being made to protect consumers, but the pressure from tech companies and the desire to not be left behind in tech innovation by the US and China will likely continue to be higher priorities. Along with some puzzling self-sabotaging decisions and increasingly right-leaning influence, all of this is undermining most of that work.