I think this would be a better state than we have now...

... but I feel like it isn't the ideal solution. I don't think we should make the perfect the enemy of the good, but what I'd really like to see is that people own their data about them.

I should be able to figure out what vendors have data about me. I should be allowed to be forgotten. There should be severe liability if they don't forget me.

I should be able to contract away my data, but in return for a real benefit, and that shouldn't extend to sale / redistribution.

I don't buy anonymization. De-anonimization is too easy, too good, and progressing too quickly.