I only see administrative steps there, nothing concrete.

As EFF’s guide points out, states must implement clear and precise legal frameworks that:

• define surveillance powers and limitations;
• ensure all surveillance measures pursue legitimate aims without discriminatory ends;
• subject interference with privacy to rigorous necessity and proportionality analysis;
• require prior judicial authorization for digital surveillance measures;
• maintain detailed records of surveillance operations;
• establish independent civilian oversight institutions with technical expertise and enforcement powers;
• guarantee individuals’ right to informational self-determination and proper notification; and
• provide effective remedies and reparation for victims of surveillance abuses.

I feel like these abuses are already normalized in the name of protecting the children and fighting terrorism. The average person believes in the need for these invasive policies and looks at you like a crackpot for saying otherwise. The future looks a lot like 1984 to me.