Not sure why you're getting downvoted - this is the legal standard which many state entities have successfully applied for years, often to the glee of HN users

Not sure why you're getting downvoted - this is the legal standard which many state entities have successfully applied for years, often to the glee of HN users (e.g. US companies getting GDPR fines because they have users in the EU).