That's just beating around the bush hoping some tangential cost might make the fundamental problem moot. What's needed is a comprehensive privacy law that gives

That's just beating around the bush hoping some tangential cost might make the fundamental problem moot. What's needed is a comprehensive privacy law that gives individuals legal power to prevent/audit/delete/restore companies' dossiers on us. Critically one that can't just be nullified through more boilerplate legalese "terms" that nobody reads. Something like a US port of the GDPR.