Rather than throw the whole thing out because the premise was once applied poorly, the legislation could restrict the actions taken with said logs. PII and the selling and collating of said information from multiple sources stand out to me.

"This website requests permission to connect your information collected from web page views with your user account"

"This website requests permission to sell information gleaned from your web page views to third parties."

Implemented at the browser level, with the ability to set preferences like with location and do-not-track cookies, doesn't seem so far-fetched.

With log analysis for security purposes being generally permitted. Presumably popular servers would quickly default to a level of logging that complies with a more reasonable middle ground than "log and analyze absolutely everything you can think of."

Imperfect, but sounds like a good place to start to me. Frankly, people like you who want to just minimize the concern and pretend privacy is a fringe interest are exactly the problem with our industry. I think most people a) don't have any clue what's going on and/or b) assume, perhaps rightly, that the battle is long since lost. But it doesn't need to be.