The past 2 years of GDPR enforcement has looked halfway encouraging. As a libertarian, I still really cannot think of any other way to prevent our individual liberties from being destroyed by the surveillance industry.

Maybe in some alternative universe where the government never mandated social security numbers, driver's license numbers, birth certificates, or laws against "fraud" for using narrowly-scoped nyms. Where the economic treadmill wasn't run so hard, so people had time to practice good digital hygiene like installing Adblock and the advertising industry never developed. But that's not the world we're staring down, and we only get one.