Hopefully the US does not follow Europe's overreaching business-crunching GDPR edict. There's already enough government regulation on US companies.
I know, I know, an unpopular vote here probably. If a company doesn't have its act together, it can already be sued. HIPPA is another example of gross over-bearing government excess.