GDPR and similar privacy frameworks should be adopted globally because they encode democratic values, but the more likely alternative if countries don't adopt them is authoritarian data models where governments can access all data for surveillance and control, making strong privacy regulation a bulwark against authoritarianism.