A legal solution? Legal solutions are never "very simple".
There will be an army of corporate lawyers that are going to try to find loopholes against an army of legislators trying to close them. Plus a few trolls using the new laws to threaten businesses. What starts with a simple idea quickly becomes a monstrosity like GDPR.
If you think that GDPR is a step in the right direction, I've got a bridge to sell you.
Here is how GDPR is likely to pan out in a few years. Some big companies get sued under GDPR. This sets precedents and makes complying with GDPR more expensive. Because it is now harder to comply with GDPR, that becomes a barrier to entry for new companies. The fact that the barrier to entry exists makes the big companies more profitable. And the fact that the regulatory scheme improves their profit margins will incentivize the internet giants to engage in regulatory capture and improve their profit margins even more.
The result? The big internet companies wind up like Brer Rabbit. They say, "Don’t throw me into the briar patch."
There will be an army of corporate lawyers that are going to try to find loopholes against an army of legislators trying to close them. Plus a few trolls using the new laws to threaten businesses. What starts with a simple idea quickly becomes a monstrosity like GDPR.