The thing which bothers me the most isn't the fine structure — steep fines for bad behaviour are fine (pun intended) — it's the so-called 'right to be forgotten.' It essentially makes simple immutable logs illegal. I'm still not certain how we're going to handle it. Encrypting each record with a per-identifier key works, but that makes doing anything with the data as a whole prohibitively expensive.

And there's the whole question of what counts as identifying information. My understanding is that IP addresses do — so an immutable plaintext server log is now illegal.

Privacy is really, really important. But expanding the definition of privacy too far is just too much.