IIUC, the proposal is for a government agency that would take enforcement action on behalf of aggrieved citizens. I'm skeptical that it would achieve those goal

IIUC, the proposal is for a government agency that would take enforcement action on behalf of aggrieved citizens. I'm skeptical that it would achieve those goals, at least for most citizens. Consider the FCC under Ajit Pai. I'm guessing a better solution is this combination: (a) legislation similar to the EU's GDPR, and (b) legislation that prohibits consumer-oriented products and services from requiring EULAs or other licensing terms that give up the rights granted under (a), and (c) grants private individuals the right to bring lawsuits for violations of (a,b)