Regarding the DoD purchasing data from data brokers, I would much rather first focus on laws or regulations that set legal standards for the collection, sale, and other distribution of personal information. For example, make the sale of personal information to a government agency an act that requires posting notice on a public register. Also, a hefty tax on the sale of personal information would be nice to see.

I would focus on the collection and sale of personal information first because it is often done without the informed consent of the person to whom the information is associated.