I don’t think it scares the big players enough; they still violate it. I’ve also had trainings about it.
do you two understand how common training about sensitive data is?