It cannot be outlawed 100%, no problem can truly be solved by legislation. But that doesn't mean we can't start by banning sale of user data. I don't understand how it is legal to do even today.