[closeparen]

Even GDPR only applies to private entities, and the same polity who did that have used their willingness to regulate data handling and software architecture to, if anything, minimize end-user privacy vs. the state.

[anticensor]

Some countries have their equivalent of GDPR applied to the government entities as well. Turkey and India are such examples.