Privacy should have been promoted through technological means, e.g the EU could have funded development of fingerprintless browser technologies, zero-knowledge proof based identity verification, etc, instead of through bureaucratic regimentation of private interaction.