I think the solution is more that "personal data" needs to stop existing. Either it's private, and then NOBODY has it (i.e. stored on local machines, paper or

I think the solution is more that "personal data" needs to stop existing. Either it's private, and then NOBODY has it (i.e. stored on local machines, paper or just memorized), or it's not private, and then it's publicly accessible on a website, or it's confidential and then it's either service-specific data that is deleted as soon as possible (e.g. web searches) or given along with a physically signed contract containing an NDA and penalties for failure to keep secret. The best way to achieve this is to require, by law, companies to publish on the web anything they learn from customers that is either not strictly part of their interaction with the service or has been stored for more than a month. This will result in companies no longer asking for things that customers don't want to be public, and deleting interaction data unless the customer wants it kept and published. Also it will result in a reduction of Google/Facebook/etc.'s monopoly powers since they will have a reduced monopoly on customer data.