Worry not, we are already doing that! GDPR + AI act is almost the definition of unstable regulatory regime, compounded by the fact that the specific implementation of those is up to the member states.
I don't have weird AI fears and I'll be shocked if LLMs end up being more than "it helps writing code sometimes, kind of", but there are potentially great use cases to investigate and I don't see what all of this is getting us.