These statements + the 60 minutes piece awhile back (https://www.cbsnews.com/videos/brain-hacking-2/) make this a very likely outcome. I wonder what the equivalent warning label + restrictions will look like.

Removing much of the motivation for this crap by outlawing exploitation of user data, and making even having it very expensive and/or risky, through huge bond or insurance requirements to cover data breaches for anyone who stores such things, would be a good place to start.

And yes, that should absolutely apply to more traditional data-mining companies (credit card companies, for example).