Privacy regulation often reads like a manual for control, not a charter for citizens’ rights.