At least part of the problem is that no one knows exactly what the fix should be, legislatively. How do you define what info Google and Facebook shouldn't be a

At least part of the problem is that no one knows exactly what the fix should be, legislatively. How do you define what info Google and Facebook shouldn't be able to collect?