it is not the legislation of the tech firms that matter. it is the declaration of individual ownership of our own "data" and "self" that matters. When Google, FB et al launched, the tech to make that distinction didn't matter and the scale was relatively low. So it is natural that governments come to regulation of this later in the cycle. Same thing happens in China. Governments are always trailing indicators when it comes to commercial regulation