"...could be a revolutionary new privacy agenda that incorporates the best aspects of data protection laws from the EU, along with protections inherent in all sorts of other relationships, like the information fiduciaries concept, and rules of trust and loyalty and these questions of design and prohibitions on dark patterns. It could be a really comprehensive, robust set of rules. Or, it could end up being U.S. GDPR. Which is—no knock on the GDPR—but it’s probably not sufficient to meaningfully respond to the threats posed by the major technology companies and practices of our day"
Woodrow Hartzog,