Germany gets a lot of stuff like this right. For example, I work in infosec and it is a nightmare to do anything that might identify a user, as it should be.