As governments increasingly embrace Privacy by Design legislation, tech companies face choices in fixing data pipelines (Protocol)