The GDPR isn’t an outlier. It’s the first big step toward a more government-regulated internet. And we don’t get to complain about it because we had an opportunity to regulate ourselves and we didn’t. Even in the absence of regulations, safeguarding the people we design for is the job.