They are still voluntarily selling to police which is consenting. It's not your data, it's their data they collected about you.

Perhaps a good line to draw would be to ban resale of data? It's difficult to try to write a law around but at least we all agree it's a problem. It's a start.