A bit random, but an unpopular opinion: build first, regulate/appease regulations later. You should have enough common sense to know how to protect user data without relying on regulations to tell you how. Answer: use ChatGPT for a template