IMO most laws should be at the level of goals, and the agencies implementing them should get down and dirty with how that should be achieved. So the upthread comment would be appropriate for whatever agency is tasked with implementing a last stating “social networks may not cause user lock in”.