They already had an obligation to respond to such inquires under the older EU Data Protection Directive. But they generally ignored the requests or only gave incomplete data (e.g., you'd get your facebook posts, etc., but no tracking data they had on you).