A new data privacy proposal points the way toward a compromise between tech companies and users. I see in this proposal a template for what could become a model for universal data privacy and online safety requirements, and unpack the key elements in this analysis. Ideally, technology platforms would adopt this approach all on their own, but if they cannot, or will not, legislatures and regulatory bodies around the world may begin to feel growing pressure to step in and compel them to do so.