Comment by ianai

Those questions would be addressed in the actual legislation. Yes, enforcement becomes the tough point. I actually suspect that might be why it makes sense. Companies would be incentivized to not keep data around any longer than they need it. And companies like facebook would have incentives to decrease the size of their networks as a mitigation from class actions. They might even restructure to match a franchise model where you only ever interact with your “local” FB. That local FB would be much easier to police both within FB and externally.