If regulators really wanted to stop the abuse by Facebook and every ad company, they would outlaw the collection of any tracking data of users on any website ex

If regulators really wanted to stop the abuse by Facebook and every ad company, they would outlaw the collection of any tracking data of users on any website except the ones you own (website operators have security needs). Embedded content in other websites (via any means including iframes) not owned by your company could not record tracking data or insert data into the user's browser (e.g. cookies, custom urls, Web SQL Databases). Any sharing of user data with other companies is illegal. Cannot abuse what you don't have. I expect any legislation to make competition with Facebook very difficult.