It’s already a law in Europe. GDPR and ePrivacy. You have to get consent from the user. Having worked for European companies, they take it seriously.

The assumption that telemetry is not allowed by GDPR is flawed

https://gdpr-info.eu/recitals/no-26/

Anonymous telemetry is allowed – and I don’t have a problem with that.

Unfortunately there's no such thing as anonymous telemetry. There are multiple techniques to re-identify scrubbed data, and some [seemingly innocuous] data is inherently identifying.

https://techcrunch.com/2019/07/24/researchers-spotlight-the-... | https://www.eff.org/deeplinks/2023/11/debunking-myth-anonymo...