GDPR is useful because it defines what must be protected (or avoided). It’s straightforward to do the right thing as a company.

To make it stricter or pack a bigger punch, there needs to be stronger mandate for such legislation. And we live in interesting times… wars, previously democratic allies disintegrating, useless right wing or russia-aligned governments and MEPs, etc…

So yeah, could be better but all you and I can do is talk to our MEPs, help inform people outside tech, vote this way and hope enough people share the concerns