I think banning it is the wrong approach. Data ownership should be regulated that personal info belongs to the person it is about. Companies need to pay for it if they want to store it over a certain time period. They also have to face large fines when they leak personal info.

Imagine how quickly companies would only save minimal personalized data.