U.S.-based device makers have been grappling with FDA cybersecurity requirements for some time, but now the European Union (EU) is working on cybersecurity regulations as well. Throw in privacy requirements by the state of California and the EU’s General Data Protection Regulation (GDPR), and device makers are facing an increasingly complicated world of enforcement and litigation.