@inthehands I'm going to argue that GDPR is more than half-way to such a law --- if enforced aggressively enough.