Personally, I think the GDPR cookie notifications have severely degraded the user experience of the web. I also think it's become just another "Terms and Conditions" - something that people reflexively accept because they want to get on with using a product.

Future regulations with teeth, but don't exist yet, are things like:

- Data portability: I should be able to export my entire Facebook account in full in a standardized format and easily transfer it to any other social network of my choosing.

- Algorithmic control: I should be able to choose which recommendation algorithms are being used on me, or opt out of algorithms entirely.

- Algorithmic transparency: As a consumer, I should be able to see something similar to what Facebook's growth team sees. What specific changes caused people in my cohort to increase their watch time by 2%? Was it better button placement, which I'd be okay with, or was it an increase in conspiracy content, which might not be?

All of these things might be huge overhauls and difficult for the social media companies to deliver, but if you are pushing content in front of billions of people's faces for hours a day you should have an equivalent immense level of responsibility.