Which of the four "requirements" are precise enough to realistically be laws? They appear to boil down to opinions of some random people on a committee, that's why they contain language like "Google did not do enough" - well, what would be enough? Every single Google account holder was emailed in the runup to the change and there were banners on all the websites for weeks or longer, if I remember correctly. The notification effort was huge.