If things go bad then the problem they cause is so huge that nobody is capable of taking responsibility for it. The following is an illustration of what I mean:

Eg imagine if one of these surveillance companies gets hacked. Personal data and the habits of a hundred million people get compromised.

The penalties for this should be enough to make everyone affected whole.

If your neighbor had a secret camera in your home - what would it take to make you whole? I imagine most people would be okay with like $50k (or some other large sum like that).

Are these surveillance companies ready to pay $50k per person? Hell no. 100M * 50k = $5 trillion.

Nobody can afford to pay that much. They either end up going bankrupt or are absolved of this responsibility. Either way, the people affected will not be made whole.