Simple really....

Must be instituted at Federal USA level or across the EU.

Make a law that says people can opt in, but should never be forced to opt out, and that data collection about people is opt in only.

Then make the fine per violation 10 million per victim.

There ya go... all the executives just flatlined.