We need laws where companies are forced to reveal source of personal data. Like how did XYZ company get my contact info to spam me?

I think you want the word “provenance.”