We need to build accountability mechanism between it that makes these kind of bridges possible. The GDPR is a good start, but it doesn’t go far enough. We really need to go even farther than the GDPR for the mechanism in between that we can protect people’s privacy by design.