Oh yeah man, as someone who works in privacy for a global company in a tech space it's just a constant juggling act. By the time you've caught up to EU regulation California and Brazil are changing their regulations. Some of these don't agree to the point where core functions that involve data movement from between countries is just straight up impossible legally. What one country allows, another country has banned lol.