> GDPR was a good start.

Honestly, I agree with you, but GDPR is barely a start, it does little to actually protect people's privacy. It needs to expand a lot to be an actual weapon against surveillance