Lots of recommendations to get a lawyer to handle complex issues...

I have to say: legal compliance is an incredibly low bar, even from the perspective of international privacy law.