Regulating data privacy in the age of surveillance capitalism : the making of the European general data protection regulation and the California Consumer Privacy Act