This sort of blanket data collection needs to be made illegal in every single jurisdiction, and have _very_ robust penalties for anyone found in breach of them.
Legislators in every jurisdiction seem to have more to gain with the data collection than without.
And those jurisdictions need to have people not susceptible to bribery or extortion by the corporations making those data collection devices. That's a big ask.