> "what can we do to mitigate this problem?"
You can always refuse to use web sites that ask for personal information without a legitimate reason. If enough people do this, these sites will either change their practices or disappear.
Which web sites did you have in mind?