Hacker News Reader

Perhaps the US needs national/federal GDPR/CCPA-style legislation?

Possibly, but the BMJ is the British medical association. This report tells about UK data breaches.

Oops.