Is it too late for governments to legislate against the sale of customer data? Legally make it opt-in rather than opt-out, as well as including provision for c

Is it too late for governments to legislate against the sale of customer data? Legally make it opt-in rather than opt-out, as well as including provision for customers to request details of what data related to them has been sold to which companies. It feels as if it's too late because the economic base of companies that exist purely as leeches off collected and processed personal data is large enough that it could cause economic problems for the jurisdiction brave enough to attempt such legislation. ie. there's too much money already in the pot for the government to force players to fold their hands.