Since GDPR came out, the two companies I worked at have been more cognisant about how we stored user data for EU customers (e.g. making more fields optional, giving user deletion options). And we also undertook a review of how we stored data for California customers for CCPA.