It would probably be some very large number backed by a theory like "this violation has deprived the plaintiff of their ability to fully control the disposition

It would probably be some very large number backed by a theory like "this violation has deprived the plaintiff of their ability to fully control the disposition of their private information and activities, thereby creating permanent direct and indirect risks whose damages to the plaintiff's income, income potential, business, reputation, and family are limited only by the malevolent collective imagination of an unbounded pool of individual, institutional, or governmental adversaries."