So the Biden administration's stance is what exactly? That data brokers are fine and cool, until the point of exfiltrating the data to 'a country of concern'. Shame.
There really needs to be a chain of custody for any data these companies have. And at any point, a person should be able to follow it back and see exactly where it was collected, and have it removed from every entity along the way. And if there's a break in the chain, the company should be dissolved and its entire leadership sent to prison.