> Is there a bullet point of what these laws prohibit/require?

I can only offer my bullet point: true consent should be required for anybody to collect or use data that relates to me or my equipment.