I've been advocating for a US version of those data protection laws since the mid 90s. Unfortunately progress has been slow, often because of the traditional paranoia about any kind of government regulation.

As usual, we will probably have to wait until a lot of people start experiencing negative effects. Nobody cares until it hurs them personally.