I wonder if the E.U. even realizes that one reason the GDPR is probably popular is less because the E.U. can go into a country they have no jurisdiction (or power) over and more because "GDPR Compliant" is a good marketing strategy.
Different from Chat Stasi.
To a large extent, privacy is security and collecting less data means not ending up being humiliated in the same way Adobe once was. It also means not upsetting the more local FTC, if someone is large enough for them to care about a breach.
"GDPR compliance" (minus the cookie parts) is kind of just an extension of what someone should be doing anyway.