https://www.europarl.europa.eu/RegData/etudes/BRIE/2021/6893...
Unlike GDPR, if you work on some random product or website this most likely does not apply to you.