Not theft indeed, but copy/use of data without consent. How are they worse: They are now at risk if there is a data leak in the USA. There are higher fines for

Not theft indeed, but copy/use of data without consent. How are they worse: They are now at risk if there is a data leak in the USA. There are higher fines for data leaks in Europe, so they aren't as well protected as before