There is an easy way to fix this: make the companies collecting the data be criminally liable for any misuse or leaks of this data. Something with teeth, such x% of total revenue, not our current “sorry, we leaked your data, tough for you”
If this data is so important it should be treated with the same care & auditing that their income stream gets.