The US is not GDPReady — let alone informed