As much as I would love to have the protections offered by GDPR, I doubt it would even make it past a committee vote. Telecom/technology lobbyists would exert maximum pressure on legislators in order the proposal to die. There's far too much money to be made in trafficking user data.