It's very middling: Google Analytics still tracks the vast majority of the web, including some government sites. Targeted advertising is still a thing. The cost of vagueness is pretty huge.

And the issue of lawfulness of "safe harbor" is still unresolved. US companies can just transfer data to the US where the US intelligence services can spy on it, regardless of what the laws of either country say.