I disagree on the GDPR one. It's the only piece of legislation that protects my data online.

Prior to GDPR any data that you create wasn't yours and was freely sold, traded and aggregated. Even if you asked Google, Facebook or whoever for YOUR data to be sent back to you; they wouldn't be obligated to.