> Essentially GDPR has become a de facto global law at this point.

This is called the "Brussels Effect" ( https://en.wikipedia.org/wiki/Brussels_effect ) and much like the California Effect, leads to most everything being made to the more stringent standard because the market requiring it is so big.

Same reason most of your electronics are RoHS2 too.