Simple fix.

Ballot measure to replace the “right to be forgotten” with the “permission to be remembered”, that need to be renewed every, 1-3 years. If companies fails to obtain permission in 3 years, then it must remove your data. Such permission is non transferable, meaning that if you started an account with Good Company, Inc. and it was acquired by Evil Corp, Inc. The latter need to get a new permission under the new name. Oh, and data brokers can’t have your info, unless they ask you for permission.

Right to “opt-out of sale” needs to be replaced with “option to opt-in”. Basically meaning you opt out by default and companies need your explicit permission to sell you data.