>Even with the best of intentions, these laws can be labyrinthian and ambiguous, and therefore expensive to (try to) observe.

Are you referring to gdpr? If so, that is such a clear set of documents (especially article 15) i would ask you to take a re-read.