> GDPR was passed not that long ago.

Sorry, I should have been more careful. It's a citizen versus a consumer thing; GDPR is about the latter and does not give you any real privacy gains in regards to your government except in areas where your relationship is business like.

Some Menial Low-Stakes Agency is required to handle your email and address details appropriately, sure, but meanwhile Europol was still able to mass collect data and have the Commission cover for them after they were found out.

GDPR actually specifically regulates citizen-government interactions as well (article 2), with special exceptions for law enforcement (article 2.2.d).

You could of course argue that authorities can still make up any kind of law enforcement related reason to exclude you anyways :)

Edit: My point is sorta that the exceptions are a whitelist not a blacklist.

It's just the same good old EU BAD -> everything coming from there BAD. There's even a comment under this post on how GDPR "degrades the web in the name of privacy", I guess trackers are just way better then cookie banners after all.

Then you read Utah and California have comparable proposals yet I've seen a single mention of them in the whole comment section.