The real radical solution is to enforce ownership of any and all metadata connected to you, and to acknowledge that in the case of a breach, damage is done statutorally, even if nothing has happened due to the fact that no one has seen interest in using your info against you yet.

You should also have the right to update or modify any state stored about you at any time; after all it is yours.

No one who collects it wants that though.