There is also Data Act, AI Act. Not difficult to comply with but lawyer probably needs to look the papers over