How Privacy Regulation Can Emerge from the Data Dark Ages