Something in me almost wants to see this law pass, just to see what happens. I am guessing anyone who knows about internet infra / privacy / security, would either stand up and protest it. Though, for some reason, part of me thinks people would just find a way around it, feel like it is fine like that and not protest at all (I sure prefer the first option). Or I guess the third option: mass noncompliance. Which I guess has been the answer to a lot of EU laws.
But GDPR is kind of the opposite in that it protects the right to privacy (in this case from surveillance capitalism), so conflating them seems counterproductive
In a way both are about taking away liberties and chosing what's best for us. But yes, GDPR is not evil, it's just difficult to confidently comply with since it's so broad. Obviously very different to the proposal in the original post.