Isn't the whole issue that the data is being collected by private entities indefinitely for profit? Data leaks will happen and at this point private industry c

Isn't the whole issue that the data is being collected by private entities indefinitely for profit? Data leaks will happen and at this point private industry can be just as bad as the state. What happens when private prisons purchase such information? Or other private institutions that have taken over government responsibilities?