Cybersecurity Law

Need two separate questions answered on two different pages In 150 words each.

1. What surprised you most about how businesses collect and use consumer data?

2. Do you think the United States should pass a comprehensive data privacy law? Why or why not? If yes, should Congress use the GDPR as a rubric? Why or why not?