And personal data makes an excellent framework, and saying I own data about me is a good way to make the ownership and control relevant, and allows lots of different approaches. It's feasible to imagine most (western) countries agreeing "data about a person or their digital actions" being something that can be put into their laws.
It's hard to imagine everyone agreeing "this regulatory body will oversee data"
The EU was first out the gate, and it's enrolling but heading towards restrictions on all usage then allowances for medical and academic research (you publish, you were allowed) and restrictions on personalised advertising.
It's going to get messy, but I think DuckDuckGo has the right balance - if I search for "trainers for old men" Inwill get adverts for that. But they won't "remember" my search the next time. Honestly I will be amazed if the conversion rates for DuckDuckGo and Google are different enough to justify the suck that is internet advertising today.