Bruce Schneier had a blog post last year, 'Data is a Toxic Asset'. His ideas about what to do are... "We need to regulate what corporations can do with our data at every stage: collection, storage, use, resale and disposal. We can make corporate executives personally liable so they know there's a downside to taking chances. We can make the business models that involve massively surveilling people the less compelling ones, simply by making certain business practices illegal."

[0] https://www.schneier.com/blog/archives/2016/03/data_is_a_tox...