First thing first: That dude of the Primitive Technology channel and all his copycats have a great advantage: access to unlimited supply of bamboo. Unlimited to their objectives. That stuff is great, tuff as shit, light as feather, can be used to many purpose with little modification and not too much work.
I also read most of this: https://en.wikipedia.org/wiki/General_Data_Protection_Regulation#Responsibility_and_accountability I think technology and it's use are running forward and lawmakers lag behind. Those who spent any time in the past two decades on the internet have a giant heap of data about them. I think Bernd posted a video about a security eggsbert, I think he works kind of a private investigator many time cooperating with officials and he said in that video anonymizing data worth nothing it can be de-anonymized with ease, and both companies and govt agencies do. Now this law was passed at 2016. This year the EU countries have to start implementing it. Who knows how long it takes until it finishes. The whole stuff is kinda vague (it can be modified when necessary tho), and I don't know for example how the EU can force a foreign company to do whatever? There are sanctions but what jurisdiction the EU has over a US based firm for example Facebook and how the EU will force the sanctions onto for example said company?