Sounds like you want something like GDPR. Without that entities can collect and sell data about you like this, and the government can buy it.