But isn't the feedback loop between global market access and regulatory compliance already shaping how these systems are built from the start? For instance, the GDPR's reach showed us that even non-EU companies often bake in compliance by default to avoid losing a huge chunk of their customer base entirely, rather than try to wall off European users with geo-fencing or some such.