The user does not know that Facebook it going to tip off the insurance provider about the user's unhealthy eating habits or his chronic medical condition. Or ma

The user does not know that Facebook it going to tip off the insurance provider about the user's unhealthy eating habits or his chronic medical condition. Or maybe tip off his bank that he has substantial wealth elsewhere. Are you aware of any instance in which this has actually happened? AFAIK Facebook has not been selling location data to anyone, and this would be a direct violation of their privacy policy. Further, if I worked for an insurance company or bank, I’d have customers install my mobile app that has lots of convenience features, and have that app request location permissions so that I could get GPS data directly from their mobile device. Then I’d use that location data, that I obtained directly and in accordance with all applicable privacy policies, in all of the scary ways you mention and then some. Going to Facebook is not the most efficient way to violate the privacy of most individuals. Most people will happily trade their privacy for a small discount or to be able to save a few seconds interacting with a service they use. This is where any legislation in this area should focus - not on punishing a specific company because the “wrong” candidate happened to win an election.