The world needs to move to making all data collection opt-in. There should be no negative impact to failing to opt in, unless absolutely necessary. Those exceptions should be clearly legislated, and be easily challenge in court.

This would require a right-to-privacy constitutional amendment in the US.