I wonder if there's any chance something like the GDPR could make it in to law in the US. It's long past time for the US government to take serious actions against companies that violate user privacy and security.
Won't happen in this climate. Or any climate. This current clan is too business-friendly.
I could see someone like Elizabeth Warren or Ron Wyden getting behind it, but not really the rest of the pack (it's not a popular enough issue when you weigh it against things like student loan forgiveness, or universal healthcare).
I do wish it would become law here. It would make my professional life a bit harder (mostly on the security front, we already steadfastly refuse to "monetize the data" or even give it to any third party, to the point we've rejected those questions from investors) but it's definitely the right thing to do since the benefit for consumers is much more important.