The GDPR has over 100k words, and those words are certainly less than 0.01% of the thought that has gone into this problem.