Well, my suggestion is kind of aiming to be as pragmatic and unambitious as possible, so the fact it doesn't have an effect against giants who spend a lot of money on security is part of the pragmatism - it means you split the opposition a bill like this would face. The big companies would see it as a way to expand their moat, and so, they'd probably lobby for it, or at least, you could convince them not to lobby against it.

If you can build a big coalition of people for whom privacy is something important, then you can start making ambitious policy proposals because you'll have the voters to back it up. Before that point, I think you have to try for easy wins.