Removing much of the motivation for this crap by outlawing exploitation of user data, and making even having it very expensive and/or risky, through huge bond or insurance requirements to cover data breaches for anyone who stores such things, would be a good place to start.

And yes, that should absolutely apply to more traditional data-mining companies (credit card companies, for example).