what are legislates if not the opinion of the current society (and for some countries the opinion of corporations)?

As in yes, with my current understanding of personal data, I do believe we should have laws safeguarding them - even at the risk of business'.