EU already has this with the GDPR. Only limitation are retention periods required by law, like employee data needs to be kept for ten years in Germany for example, but for the duration whoever has the data must block it from being processed for anything but the legal requirment, as that becomes the legal basis for processing (storing in this case) and no other uses are allowed until deletion.

Only applies to EU citizens though plenty companies have implemented straightforward ways to delete an account for everyone.

This AR obsession is utterly baffling to me. There are so few real applications and the hardware requirements are insane so it’s not something that will get widely adapted anyway. Sure in a decade or so it might have matured enough to have shed all these issues, but AR/VR feels like a really out of touch thing to prusue, especially if you look at the garbage ideas they have on how to use it - virtual meetings??

I get movies and games on these, possibly even some recording and porn, but these are not their B2B wet dreams anyway.