If we agree that data will be collected whatever laws we put in place, under the same premises can’t we agree that it will be misused as well ?

Problem with laws to me is that they are only binding to some portion of the actors. Some government actors have a mandate to work around the law, and other organisations have divisions dedicated to avoid triggering these laws. Regulation is only part of the solution.