America should borrow from Europe’s data-privacy law
Generally I agree but I think the law should take a different slant. Rather then providing consumers recourse after their data has been collected we need to provide individuals the right to control what data will be collected.  All devices should have a label describing what kind of data collection they do. This label should be on the packaging in easy to understand human terms (not buried in the EULA). Additionally devices would be put into classified into one of 4 different classes:Class A - no data collectionClass B - anonymized statistics for diagnostics that cannot be used for marketingClass C - anonymized usage statistics that can be used in aggregateClass D - Targeted collection that can be used for targeted marketingConsumers should have the explicit right to opt out of any and all data collection without risk of impairing the primary function of a device.  For example there is no reason a TV should need to be anything beyond class A (maybe B).  A smart speaker on the other hand needs to be a B maybe C.  Nothing should need to be a class D.