Or legislate these things have to be opt-in. I remember when politeness dictated you ask someone before even taking their photo. I think the companies collect

Or legislate these things have to be opt-in. I remember when politeness dictated you ask someone before even taking their photo. I think the companies collecting personal information assume they have more entitlement to it they they actually do, and are on the wrong side of the law - especially when breaches like this result in real damage. I'd like to see a few really harsh class action lawsuits bite them in the ass and leave behind bad enough scars that other firms begin to see personal data as a liability not as asset.