>> "Don't collect information without letting people control it."

That would be great for data clearing houses. Google would jump at that law. Such an approach places responsibility with the data subject. The individual becomes the defacto privacy officer. I rather see laws that places default limits on collection and use. I shouldn't have to supervise how Google collects and uses data about me. I'd rather them not be allowed to collect it without my permission... which I have no plan to give.