These laws are in place for banks. This means that the bank cannot (and should not) approve transactions that do not go through SCA security, or else they’re in violation of European law. However, this also means that if you aren’t SCA compliant, banks will likely decline the transaction, meaning consumers that reside within the EEA are unable to shop with your business. This can hurt sales, so it’s in your best interest to ensure compliance.