I'm here wondering if they split the companies into two buckets (or the article is missing details). Companies with 45 millions + users and companies with less than 45 millions users.

So a company that has 22 million users will have the same regulatory burden as one that has 10? That's insanity.