Data about people needs to become a huge liability for corporations. If they want to (massively) profit off information about me, there must be incentives to keep that information safe beyond bad PR when it leaks. There's a legislative idea I like, undeniably a pipe dream at this moment, which in broad strokes is this:

If a corporation holds data records about people, and those records are leaked in any way, a fine of $100-1000 (depending on severity) per record must immediately be paid to a supervising government agency. The impacted people can then receive their share of the fine upon request.

You can Socrates this whole thing to death (what is a record? what is a leak?) but our legal system is, if nothing else, extremely well-practiced at creating robust definitions for abstract things. The solution presented seems extreme within our current paradigm, but it (or something like it) must come to pass if we are to have any hope of avoiding information dystopia.