You might have heard of the GDPR, but even before that, several countries had "privacy by default" laws on the books.