I think I'd rather have some democratic governmental agency process the data, and just have the private entities provide it. It's much easier to make rules assuming the private companies are never supposed to process the data instead of trying to carve out exceptions.

I don't actually trust YouTube with processing my watch history when I use their service, but I don't have any other options.