It already is in Europe thanks to GDPR. Just not enough formal complaints or lawsuits (yet); e.g. IP addresses are explicitly Personally Identifiable Information.