And post Brexit they'll ignore all the CJEU case law about how blatantly companies have been building GDPR since the start.