At least they have a privacy law. When deploying solutions on cloud infrastructure GDPR is sometimes mentioned with a request or demand to adhere to it. In some cases the CCPA is also mentioned, which lets you believe that Europe and California are the only places that have anything on this topic.