How could it easily be restricted? As long as people or corporations are allowed to sell timestamped, geostamped photos and videos, the aggregation can be done.
This is an oversimplification of a complicated story, but a great example is when the NSA stopped doing mass phone / text analysis because of the additional regulatory burdens imposed by the USA Freedom Act. The NSA contends that the data is still useful, but also that the difficulties of complying with the law make it not worth it.
How could I, as a private citizen or owner of a property be prevented from selling photos/videos with timestamps and geostamps?
How could a company be prevented from buying and aggregating that data (even in other jurisdictions)?
How could an end user be prevented from buying aggregated data as the cost plummets?
Do you really think the NSA is not buying all available data sets?
If your goal is to restrict the transfer of some other kind of data, copyright is already a legal and practical framework that had tackled the same problems, and offers solutions.
The government has pretty wide reaching powers.
The same people who sold browsing data to advertisers have this technology.
Most ideal: make personal data a massive business liability, such that personal data is rarely even collected, let alone stored. This is much more possible than people believe (even making exceptions for current regulations like KYC). Does the local pizza place need to know anything more than my order, where to deliver it, and that the money arrived in their account?‡ Does a hotel or airline need anything other than a confirmation code to hand over the room key or seat? And yes, this may kill off or force pivots from businesses that exist today solely to spy on us—that's the point!
Only okay: personal data isn't shared or sold to third parties. Businesses can collect data on their own users, but it can't leak beyond the corp firewall or else big penalties come into play. Only okay because leaks are almost mathematically inevitable, so there will be constant lobby pressure to relax regulations, or enforcement thereof.
Not good: personal data can be collected, retained, and sold by basically all companies, and the penalties for unintentionally disclosing those data are just slaps on the wrist. At least it can't get much worse though, right? Right??
Businesses will adapt to any set of regulations—it's up to us citizens to demand the laws we want.
‡But what about remembering your favorite orders, or saving customers time by not entering their info for each new order? One options is to let them bookmark the page, so their device can get back to it easily.
We saw how eager people were to install Google Analytics on their websites. They don't care what they do to their users.
Of course finding the political will to restrict things like security cameras is a different matter, but I don't think it'd it'd case that we couldn't write effective laws to prevent this.
You would make it a crime to violate the rules but administered like and possible to sue in civil court for victims. The crime would be on the owner/operator of the camera and special provisions would be added for storage providers.
Yes, we can imagine some set of laws that would make the aggregation impossible. I don't see how they could be effectively created and enforced.