Legislation will always lag behind reality here but if there was political will, you could still have privacy protected. It is not about regulating technicalities and more about legislating the ownership of data and how and if that ownership can be transferred. This would and should also impact trade with data and its market value that is hard to understand for most people.