I don't see how a social solution would work -- do we just make analytics, telemetry, etc... illegal? And then watch as people break the law or do what they did with GDPR: implement just enough to follow the letter of the law, but completely ignore the spirit of the law?
The sole case I can think of is GitHub removing cookies when you're not logged in so they never have to show a cookie banner. One exception among thousands of cookie banners and GDPR violations.
There is no social solution to surveillance.