One alternative would be to produce privacy regulation through a consensus-based open standards process which would then be bound into law. The downsides are that it would be slow, and it would require tough leadership to protect it from bad faith participants.
♥ 3