We do not really have a law on services that treat users as a resource. There is a clear need of innovation here. GDPR is a tiny step in this direction.
Don't we call that labor law? I'm being somewhat facetious. It just struck me as humorous to think of it that way.