I'm sure if they had to by some EU directive, they would. Organizations that big can't conceal that, as they risk discovery findings and whistleblower activities.

Only when the punishment for not complying is a certain (ever increasing) % of their revenue. And it is actually enforced.