This is sort of how European data protection is supposed to work, although you have to maintain your own list as there is no central one. And the enforcement is intermittent.

(Data subject requests are a very powerful tool)