well this article about GDPR just dunks on us americans with our terrible notion of what "privacy" means:
"Europe’s data protection regime stands in stark contrast to that of the U.S., which has no single overarching, cross-sector, or cross-situational data protection law.
[...]
This cultural difference often sees American developers struggling with the concept of privacy as a fundamental human right enshrined in law, a situation which has no U.S. equivalent."
https://www.smashingmagazine.com/2018/02/gdpr-for-web-developers/