I really want to see a tweak to the California and EU privacy rules that requires opting in to data collection / sharing to be at least as hard as opting out.
For the first 5 years, the processes would be swapped, and set in stone. So, you'd need to call a number, sit on hold and be disconnected a few times to get a mailing address. Then you'd buy some stamps and an envelope if you want to submit a "Please sell my personal information" form. Grocery stores would charge you more if you used a loyalty card, and so on.
Of course, a better approach would make the collection, sale, querying, possession of, and engaging in transactions involving consumer marketing databases illegal. (All those protections are needed since Google redefined "sell personal information" to not include any of their revenue streams.)
- "Yes" -> Consent.
- "No" -> Popup asks you again some time later.
- "Don't ask again" -> Meaning "Yes, and don't ask again".