If too many people opt out, they just set up a new company and boom! No one has requested they get rid of the data or not collect it.

Opt-in is the only way to make this work, and that's why it will never get passed.