Doubt that lawmakers will really protect users. Think the only way to lead to substantive change would be for users to take collective action through protests [1]. Imagine how quickly the company would take action to make real changes to user privacy if a Facebook User strike took place...

[1] https://medium.com/@oddbert2000/call-for-a-facebook-users-st...

Have crack users ever successfully mounted a strike to lower the dealer's price?

So we get the people in charge of handling equifax and creating the nsa to create privacy laws? The only thing these laws will do is moat out competition who can't handle regulatory costs, which is likely why it's being supported in the first place.