I wish there was an industry called "Don't do with people's data what they never gave you explicit permission to do". Here, both public and private sectors fail

I wish there was an industry called "Don't do with people's data what they never gave you explicit permission to do". Here, both public and private sectors fail badly because they wish to perpetuate their existence, but the public sector's existence could at least somewhat nominally be justified as something people usually want. You may want the existence of a private sector as a whole to perpetuate, but probably not at the cost of a specific entity doing unexpected things with your data. Edit: added last sentence.