I’m not trying to be pedantic, but it’s important to be clear about the issue before you start proposing solutions.
If the government passed a law tomorrow saying that companies couldn’t share user data with third parties, it wouldn’t change anything about Facebook, Google’s or Credit Karma’s business model.
Not that I’m saying we need government intervention.