Let's try something different. How about a smaller law requiring transparency first (not even the ability to delete or how to handle the data or that you have t

Let's try something different. How about a smaller law requiring transparency first (not even the ability to delete or how to handle the data or that you have to have a certain appointed position or any other nonsense). Just transparency at first. The transparency requirements can be detailed, as food labeling is, but it doesn't need to require companies to provide users their data (just yet). Then, begin PSAs and public education awareness campaigns that show some of the harms of over collection of data, overuse of social media, lax approaches to information protection, acceptability of ad blocking solutions, etc (EDIT: rethinking this, I would no longer recommend this, at least at first). Then work on a law defining culpability of data breaches (i.e. data escaping its now-more-transparently defined intention). Also, consider grants to companies providing healthy privacy practices in the social media space (these should be small, measured, and for non-profits only of course). But I would just consider it, I wouldn't actually give them out just yet. All in all, this can be done w/ steps that don't rock companies. Also, what we're going to find out is that people are happy with the tradeoff that currently exists and you can't legislate that away from them without pissing them off.