> but "tracking" is a very broad term

Which is why it should be defined in the law. The GDPR and the ePrivacy directive define what counts as tracking and what is acceptable. See for example:

https://commission.europa.eu/resources-partners/europa-web-g...

I don’t think GP is suggesting we just make a law that says “u track, u pay fine”.