Nothing short of inquisition-style inspections of company servers, code, and networks is going to fix it on that front. We'll have to do some really radical invasions of company privacy before it results in more than fines-as-a-business-expense.
It will be nice if all the EU residents in one go send a request to remove their information from all the US based media and technology giants who under the guise of changing the world are indeed working to sale more to consumers and make themselves rich.
Something like APPAA - Advertising Privacy Protection and Accountability Act
What would you guys call it? what language is necessary to cover all the edge cases for the deceptive and dirty-playing advertising industry?