Interesting counterexample, if you have more I would love to hear them. Where I live, I am required to render help if someone needs water etc. I like that law very much. Back to your example: In one case, I can press the button and then cross or not (I could stand there all day pressing the button). Without getting into local law, I bet that attack is illegal in most places, I suspect it is where I live. In the GDPR case, I can press every button in an entire union, apparently every 40 days.

EDIT: regarding response times, I found a breakdown: https://www.burges-salmon.com/news-and-insight/legal-updates...

Obviously this kinda-example ignores the point about forced forgetting which will be interesting in many ways; the astroturf market for example.