Yes, this will need legislative backing. We had the GDPR since the DNT.
I also just discovered the GPC which seems more interesting: https://globalprivacycontrol.org
I also just discovered the GPC which seems more interesting: https://globalprivacycontrol.org