Discuss what experiences have you had where, to the best of your knowledge, your personal data has been collected following some $($or all$)$ of the above criteria? How about when, to the best of your knowledge, some $($or all$)$ of the above criteria has NOT been followed?

Introducing GDPR$-$like regulations in the US could increase the cost of some services and perhaps even eliminate some services.