you think its naive to change the law but "behavior change" is a viable alternative?? the reason the op is claiming we need legislation is precisely because there is no incentive to change behavior.

im not even an EU citizen and already ive benefited from GDPR