I don't think we necessarily disagree. I am pessimistic about laws being effective in this case, but that doesn't mean we should not try to find ones that are. I like your idea. Thinking and trials in that direction would be good.
Data using organisations often seem to prefer fig-leaf laws that aren't effective, and lobby against ones that might be effective. "My data use is a good use, therefore I should not be subject to restrictions and oversight". Instead, anyone with a use of data which is valuable to the public should not see themselves as on the same side as the advertisers and surveillance vendors. They should see themselves as on the opposite side.
Data using organisations often seem to prefer fig-leaf laws that aren't effective, and lobby against ones that might be effective. "My data use is a good use, therefore I should not be subject to restrictions and oversight". Instead, anyone with a use of data which is valuable to the public should not see themselves as on the same side as the advertisers and surveillance vendors. They should see themselves as on the opposite side.