[mindslight]

Simple answer: implement a privacy law with teeth. It doesn't even need to be framed from scratch - the GDPR does a fantastic job at preempting most of the flaws that lobbyists would love to slip in.

[naniwaduni]

What is the whole "consent" nonsense in the GDPR if not a huge gaping flaw slipped in by lobbyists?