There was a much more elaborate standard called P3P recommend by w3c in 2002. It apparently defined a description of how business can use personal data.

But apparently it was considered too complex and "lacking enforcement".

Now maybe if it survived till GDPR it could have it's enforcement, but Mozilla yanked support before that...