As a rule of thumb I lean to the belief that laws are bad and we don't need governments. However, being the paranoid tinfoil hat I am it became hard to argue against laws like GDPR, CCPA, and LGPD.

We all know most average Joes don't care about their opsec and privacy, the same is true for the average company. These companies don't invest in security or privacy, hence they are likely to be hacked and when they do their customer's data is one of the valuable assets hackers will steal.

Having data leaked or made public is proven to increase fraud, so it's in the interest of everyone that this is discouraged and reduced as much as possible. So although I am in general skeptic of government intervention (laws, etc), I wonder how could the incentives be changed so that people and companies would care more about this so they wouldn't be victims as frequently.

Even if I don't voluntarily hand my data or make it public to bad actors, it can still happen because companies are sloppy and poorly funded. So a law in this field with known penalties creates enough incentive for those companies that would otherwise neglect the topic to be held accountable.

Fight me ancap bros!