Something like Solid probably needs a strongly inforced GDPR in place. Otherwise big actors can just access all the private pods and cache them in their own big data stores, and we are back to square one.