[1] https://law.jrank.org/pages/9409/Privacy-Common-Law.html
We need new laws for this. GDPR is a good start, if one happens to be an EU citizen, if a bit toothless.
We need new laws because automated collection of vast amounts of personal data, at scale, is a thing different in kind from manually collecting personal data about a specific person. Due to the expense and difficulty, the earlier system would tend to scale broadly with someone's fame, or at least wealth, which matches our expectations: it's not surprising that, say, a gossip magazine would have a fat file on Leonardo DiCaprio, and we figure he has lawyers on hand to deal with any consequent fallout.
In fact, we all used to be quite grateful for the unsung laborers who would collect and publish a doxxing book, called the white pages, which would list the names, phone numbers, and addresses, of most local people. Of course they were legally obligated to unlist those who requested it...
It actually has a better bite than most. The problem is that the one suposed to do the biting doesn't do a lot of it.
https://transition.fcc.gov/Reports/tcom1996.txt
Probably the text starting here:
SEC. 702. PRIVACY OF CUSTOMER INFORMATION.
Title II is amended by inserting after section 221 (47 U.S.C.
221) the following new section:
SEC. 222. PRIVACY OF CUSTOMER INFORMATION