> I want to see who a company has sold/given my information to and what limitations that sale has To expand on this more - I feel like laws requiring companies

> I want to see who a company has sold/given my information to and what limitations that sale has To expand on this more - I feel like laws requiring companies to keep a "custody chain" of personal data at every transfer step would be relatively un-controversial. Sure, I'd rather do away with personal data being able to be bought and sold entirely, but an easy first step is "massive fines for any company that doesn't carefully track exactly which entity touched the user's data".