Political advertising is something that FB should have tackled closer to the stem. First, they should have considered banning it entirely. I'm sure they had s

Political advertising is something that FB should have tackled closer to the stem. First, they should have considered banning it entirely. I'm sure they had such conversations around (eg) tobacco, arms, alcohol, medicines and such. FB are far from immune to the fiduciary imperative, but they are very profitable. They were in a position to turn away potentially problem-making revenue. In hindsight, IMO, that would have been the better choice. If they are going to do political advertising, they should be channeling & (internally) regulating it differently. Separate rules. ID your advertisers, and enforce local election rules by jurisdiction, like election day ad bans. Report on (or verify) spending, if local laws require it. Similar systems exist for licensed/regulated markets like financial services. You can't just start advertising savings accounts. Without doubt, transparency should be part of the special rules for political ads. On the bigger questions, to me, GDPR-like regulation is not the answer. Some parts, like reporting on breaches, are good. Other parts, like the emphasis on creating agreements between users and websites, are (IMO!) wrong. These things are contracts. The mental bandwidth required to understand a cookie policy and make informed is far too great. Transparency is, potentially, an alternative.