The EU couldn't fix the EU-US privacy framework even for the third try, and when the previous one have been invalidated by the CJEU, nobody bat an eye and continued to do the same thing.
GDPR is simply ignored by any bigger US company, it took 5 years for NOYB to facebook get fined which was less than 0.3% of their income, basically a small tax, not a huge fine.
Also GDPR is full of inconsistency (face biometric data is special data, but a photo of your face from what anybody can get the biometric data is not) and loopholes (required by law, legitimate interest).
They did something, but I wouldn't call that "a long way".
GDPR is simply ignored by any bigger US company, it took 5 years for NOYB to facebook get fined which was less than 0.3% of their income, basically a small tax, not a huge fine.
Also GDPR is full of inconsistency (face biometric data is special data, but a photo of your face from what anybody can get the biometric data is not) and loopholes (required by law, legitimate interest).
They did something, but I wouldn't call that "a long way".