The legal front: rules that reshape the battlefield

In Europe, the General Data Protection Regulation (GDPR) created one of the world’s strongest privacy frameworks, giving individuals rights like data access, correction, deletion, and the ability to refuse certain processing. The regulation also empowers national data protection authorities to fine companies that break the rules. 0

China has taken a different route: a suite of laws including the Personal Information Protection Law (PIPL) and the Data Security Law impose stricter controls, data localization for sensitive data, and broad state oversight—requirements that foreign companies must navigate carefully. 1

Corporate practices and government access

Major tech firms publish transparency reports showing how often governments request user data. Those reports, plus independent analyses and media coverage, show rising volumes of government requests—particularly in recent years—and high compliance rates from some companies. Consumers who want to understand how their data might be shared should check company transparency pages (for example, Apple’s transparency reports) and independent analyses. 2

Why this struggle matters to you

• Surveillance vs. rights: Laws that expand state access to data can increase surveillance power; privacy-protecting rules can limit that reach.
• Corporate power: Companies that collect vast datasets shape advertising, product development, and even political persuasion models.
• Cross-border friction: Conflicting rules (for example, EU privacy protections vs. Chinese localization demands) force companies to redesign systems—and sometimes to limit or block services between markets. 3

Practical steps you can take today

Want to reduce your exposure? Start small: review privacy settings, enable two-factor authentication, use end-to-end encrypted messaging where possible, choose search engines and browsers focused on privacy, and clear permissions for mobile apps. For more in-depth action, read company transparency reports and national regulator guidance. Sources and guides that explain rights and tools include DuckDuckGo and Privacy International. 4