Sounds remarkably similar to GDPR.