If you're looking for a model for better regulation, take a look at the EU's General Data Protection Regulations. It just makes sense to have a single piece of legislation that regulates the use of personal data and a single statutory regulatory agency with powers of enforcement.

https://en.wikipedia.org/wiki/General_Data_Protection_Regula...