The EU already has. GDPR and the AI Act puts a lot of limits on what you can do in the open space, although it doesn't always go far enough.