> Most privcy-adjacent laws that EU has released in recent years are neither complex, nor do they cost too much money.
Please visit https://gdpr-info.eu/ and read the text of the 99 articles that make up the GDPR. You don't think 99 separate statements of the law are too many? Not complex? Add in reading all of the CJEU opinions and the original directive behind GDPR (which remains in force). Also add the e-privacy directive, a 15 year old law that is also still in force. How can you say that isn't complex?
> Well, they cost some money
My argument is that it costs more money than it's worth. Hard to find good statistics, but we can leave it at that.
No, and no, and no.
Most privcy-adjacent laws that EU has released in recent years are neither complex, nor do they cost too much money [1].
Well, they cost some money because businesses have this entrenched idea that they have an inalienable right to your data, so they don't even know which data they collect, sell, exchange, let leak, or use throughout their systems. Well, boo-hoo. Spend some time and money to get rid of this idea.
And the laws are "indirect" in the sense that all laws are indirect. They have to be general enough to be applicable not just in the year they were released to the technology of the time.