Is there a body that enforced privacy measures on apt? What about on just random code on GitHub? Or web applications? Is a body enforcing privacy (even preventing people from consenting to give their data away) a good thing?

In grad school I did some research that involved a mobile app and people willingly giving some of their information to me (after a lot of notice and consent forms). This was relevant for legal analysis of some data collection programs. Should my app have been shuttered?