> GDPR became effective have seen the seismic impact it had on how PI/PII data is being handled.

I think the only thing most people are seeing are the absolutely obnoxious cookie banners spewed across the entire world wide web. I think a lot of people truly believe that the EU single-handedly ruined the internet. And now they're attempting to impose even more misguided laws on themselves with chatcontrol nonsense.

I think it's fine to let them do it, as long as the mess stays in the EU.

Then those people are fools who would gladly let in the wolves just to stop them from banging on the front door. The correct response to cookie banners should be to ask why companies are so willing to ruin the user experience in order to be able to track data of even just those users who accept the banner (willingly or not).