"She says a more beneficial approach for consumers would be highly detailed disclosures during the sign-up process that lay out what’s going to be stored in your 'permanent record' and how that data will be used to make specific inferences about you."

No. You should never have to try to figure out what companies are collecting or how they are using it. They should not ever be allowed to aggregate data at the individual level. And if aggregate data ever becomes fine-grained enough to fingerprint individuals, then regulation should force coarser graining. (This would mean that better machine learning systems would result in companies being able to collect less data.) We should have forced audits of every consumer company.